last executing test programs:

58.323906527s ago: executing program 1 (id=537):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x108)
syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0xa0, 0x11, 0xaa, 0x10, 0x2001, 0x4002, 0xdfbf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0xe6, 0xce}}]}}]}}, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000006c0)={&(0x7f00000003c0)=[{0x8, 0x5000, 0x0, 0x0}, {0x205, 0x1001, 0x0, 0x0}], 0x2})
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x108) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0xa0, 0x11, 0xaa, 0x10, 0x2001, 0x4002, 0xdfbf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0xe6, 0xce}}]}}]}}, 0x0) (async)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000006c0)={&(0x7f00000003c0)=[{0x8, 0x5000, 0x0, 0x0}, {0x205, 0x1001, 0x0, 0x0}], 0x2}) (async)

57.225191808s ago: executing program 1 (id=540):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r3, 0x0, 0xfffffffffffffffc, 0x8000000000000000})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x9, 0xfff8}, @sack_perm, @mss={0x2, 0x800}, @mss={0x2, 0x4}, @window={0x3, 0x122, 0xc}], 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500"/18, @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @initial, @broadcast, @device_b, {0x1, 0x5}, "", @value={0xd, 0x0, 0x1, 0x0, 0x6}}, @random="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"}, 0x20f)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x52, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x4, 0x95, 0x1, {0x22, 0x665}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa, 0xf4, 0x9}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x0, 0x0}]})

55.717199898s ago: executing program 1 (id=546):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r3 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
close_range(r2, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x200000, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="00810400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

53.321081412s ago: executing program 1 (id=556):
syz_io_uring_setup(0x6791, &(0x7f0000000400)={0x0, 0x79af, 0x200, 0x7fff, 0x40064e}, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r0, &(0x7f0000001300)=""/4118, 0x1016, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0xb, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x2c6f, 0x6, 0x8, 0x4, 0x1, 0x6], [0x10000007, 0x10002, 0x12b, 0x8000, 0x0, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x8, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xd2, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0xfffffc00, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x6, 0x101, 0x9, 0x4, 0x3], [0x89, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff805, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b95, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1fd, 0xfff, 0xfff]}, 0x45c)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x918)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
io_setup(0x1ff, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000900)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x6, r4, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0, 0x0, 0xffffffffffff0000}])
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = landlock_create_ruleset(&(0x7f0000000440)={0x75b7, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r8, 0x0)
bind$unix(r7, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r7, 0x0)
connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040000000000fcdbdf256600000008000300", @ANYRES32=r9, @ANYBLOB="ca9be103a9a5b3d527968df62eb09aab7799ed98c0f06f3f43df71d95fef5261beaa6d3e94d943a8f13325136f7aff5142c5db29de73f6ae34067f0dea"], 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)

53.197150162s ago: executing program 1 (id=558):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)

53.033342293s ago: executing program 1 (id=560):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x300}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x58}}, 0xc0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040))

38.046322429s ago: executing program 32 (id=560):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x300}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x58}}, 0xc0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040))

27.661428367s ago: executing program 3 (id=644):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0) (async)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf25110000000800150001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x8000000000000000)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0xa, 0x0, 0x61}})
preadv2(r4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffd, 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000100)={0x9, 0x39, 0x2, 0x16, 0x0, 0x7, 0x1, 0x31, 0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000024c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8f9f02000000a1000000040000000c0001800800030003000000f4efa6d7cfd53141457cfd4812e793e73090d2ad6a77a86c560b7acd8103c66c4e49c27c51c4d96995914e23379e4cbb9cbd80f37f0468e4bfdd4526e422d18c78163a3876a48d0023e2ccfc780d6fe5e2374eae16c492732767e3d008a9b207052a6ea1994a74cec9"], 0x20}}, 0x2000c090)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) (async)
r8 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)

27.59365413s ago: executing program 3 (id=645):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
r1 = socket(0x9, 0x80000, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000400)=""/15, 0xf}, {&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f00000005c0)=""/220, 0xdc}, {&(0x7f00000006c0)=""/53, 0x35}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000780)=""/16, 0x10}], 0xa)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000c40)=""/189, 0xbd}, {&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f0000000d80)=""/252, 0xfc}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/127, 0x7f}, {&(0x7f0000002fc0)=""/194, 0xc2}, {&(0x7f0000000f00)=""/101, 0x65}], 0x7}, 0x5141}, {{0x0, 0x0, 0x0}, 0xaa}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2})
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000000905"], 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x7, 0x0, [{0x4, 0x3, 0x4, 0xfffffff8, 0xfffffff7, 0x7, 0x10000}, {0x2, 0x5, 0xc542f2deb4d5b20, 0x9, 0x2, 0x9, 0x40}, {0x80000007, 0x7, 0x4, 0x0, 0x8, 0x624e, 0xc}, {0x80000001, 0xe, 0x2, 0x7fff, 0x0, 0x9, 0x8000}, {0x1, 0x7, 0x0, 0x9, 0x400, 0x5744, 0xfffffffe}, {0xd, 0x9, 0x4, 0xffffffff, 0xeb9, 0x25ea, 0xe6f8}, {0xc0000000, 0xca8, 0x0, 0x5, 0x6, 0xf, 0x4d}]})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) (async)
syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async)
socket(0x9, 0x80000, 0x0) (async)
readv(r1, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000400)=""/15, 0xf}, {&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f00000005c0)=""/220, 0xdc}, {&(0x7f00000006c0)=""/53, 0x35}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000780)=""/16, 0x10}], 0xa) (async)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) (async)
recvmmsg(r1, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000c40)=""/189, 0xbd}, {&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f0000000d80)=""/252, 0xfc}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/127, 0x7f}, {&(0x7f0000002fc0)=""/194, 0xc2}, {&(0x7f0000000f00)=""/101, 0x65}], 0x7}, 0x5141}, {{0x0, 0x0, 0x0}, 0xaa}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0) (async)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}) (async)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000000905"], 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x7, 0x0, [{0x4, 0x3, 0x4, 0xfffffff8, 0xfffffff7, 0x7, 0x10000}, {0x2, 0x5, 0xc542f2deb4d5b20, 0x9, 0x2, 0x9, 0x40}, {0x80000007, 0x7, 0x4, 0x0, 0x8, 0x624e, 0xc}, {0x80000001, 0xe, 0x2, 0x7fff, 0x0, 0x9, 0x8000}, {0x1, 0x7, 0x0, 0x9, 0x400, 0x5744, 0xfffffffe}, {0xd, 0x9, 0x4, 0xffffffff, 0xeb9, 0x25ea, 0xe6f8}, {0xc0000000, 0xca8, 0x0, 0x5, 0x6, 0xf, 0x4d}]}) (async)

26.769208743s ago: executing program 3 (id=646):
r0 = socket(0x14, 0xa, 0x6)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000040), 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000280), 0x0)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x2}, 0xc)
syz_usb_connect(0x3, 0x527, &(0x7f00000018c0)={{0x12, 0x1, 0x200, 0x57, 0xa3, 0xe0, 0x8, 0x46d, 0x823, 0xfcf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x515, 0x3, 0x5, 0xf8, 0x10, 0x5, [{{0x9, 0x4, 0x8f, 0x1e, 0xb, 0xe, 0x1, 0x0, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x8000}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x7, "7a3a2da561"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x5, 0xa, 0xc, 0x1], 0xf7}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x5, 0x5, 0xc}]}], [{{0x9, 0x5, 0x6, 0x10, 0x20, 0x6, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x5a4}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x1a, 0x4, 0x9}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x8, 0xa, 0x9}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x6, 0x0, 0x3}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xc, 0x7, 0x0, [@generic={0xb6, 0x0, "2796ee955079a2ee5c6ac2b39e0ce2d75ca1cd51a1cb7810f0f6602f393baeb2a872f750879ac3c1c28cec506e6442c8712dc9ffefc1ac096574ba7d114198c4f2c4e8cf3141c593c45c86f65fe28b7099c660f6a2b75e08248dc9bcfc5e55194d0142869dab2536f17ac16f661a1ff27c4f1ee8d9b877b9725f4bbeafdf6921dded9e9edc58c4235d6db5c2adcb1381ed7ef3a7755782e27de3e7d3f8e040e869002b481c25183c9d606b617f1f1c5867d9274c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xff}]}}, {{0x9, 0x5, 0x7, 0x3, 0x240, 0x3, 0x11, 0x97, [@generic={0x81, 0x30, "aaf8d2d99212551117bd029f4c868a57670411887cc48c2a4a43804088c7f5a34a790944fb5578c247651ab5649fd631b679a8af93b3ed79ee483094eec20a1cc9d15d9a3489692478e0169b820e7d345360506f241db862336826455492269ab1a8082500643ce7d3ff85c203d187a08601ab4a868f9394860149e6338d96"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x1b, 0x6, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x76, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xe}, @generic={0xb9, 0x8, "c5d34b66f635d87356684618d45fe96beee8ed81c447794a2de8f51c4049287b8bb0511101597cbf836876cdba0415917b4250d56d63b581c817d5910e4decd33a130f1013720cab8e248ce3bcf492fd37cc7b24e167e4f77f35227f5555020a35951509a58e9c0414ee6a40f76899d2dd91ba6675661524fdd99e1513ef7b06f5150400bac710cca2179112d84260ae17e459cb500c5dc7934a2c73511aafc95805c14f0139a7df96fce1d7983e3768aeae2c12e39f36"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x27, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbd, 0x5}, @generic={0x7d, 0x7, "d9248acabb91cbf9b21597bd4b6c4c937cf61be1fcf89efe9bf305693087868894d8462fd377ae125bf0aff3c9b17a537e05c356c115cd8d5f8b949bd4d53539fd91f81d6a93c292e4249b2e1b96ca786bcabe2fd5738a585e82eec82135bcbd9c4fb96e627101382ab4bbc7d62506380ff587d5c248daada9d482"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x2, 0x3b, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x4}]}}, {{0x9, 0x5, 0x2, 0x4, 0x60, 0x40, 0x51, 0x1}}]}}, {{0x9, 0x4, 0x3f, 0x8, 0x4, 0x8e, 0xa2, 0xfd, 0x7f, [], [{{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xd, 0x7, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x4, 0x8, 0x5, [@generic={0xb5, 0x27, "2c137ab32b700cb5827fdc6f26e75a66f9bc80cfbea5315ac6296256d189897bdcdf8aa3b3a616e2ab5870d5df1ef878b2a8de42282100d78ce6c48a1d1faf1baedab8df1c2d3db482f92f699ce76467d3415904d224082fb5cccff67c3bcc5e2821ad08ca79f878b285cc336e7a13404637f4685e830e8095aa64c7a9eea28164beb6ec1153c0020a784f304dda76fccf056bb47d41d091e4b0bbeb9135374432a02bb93d135b34eb10b2e43697796bbc82fd"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xff, 0xe, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x6, 0x2, 0x7}}]}}, {{0x9, 0x4, 0x94, 0x10, 0x4, 0xff, 0xff, 0xff, 0xfe, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "66679727eb"}, {0x5, 0x24, 0x0, 0x3a}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x2, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x6}, @obex={0x5, 0x24, 0x15, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x40}, @mdlm={0x15, 0x24, 0x12, 0xa37}]}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x5, 0x10, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xff, 0xeb, 0x80}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xf8, 0xf9, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x0, 0x6, 0x9, [@generic={0x78, 0x21, "2414f0df8d72904d9a9f65281f085215c10debc54e710be25619acf9d92507a756157f3e327ed987b3a99ada1c5d7eb351a52201a9e50022d7859ede58a466355ed9853a2e748e3938c58b5c1ff0ab0574e63f06c9ce87a4ba4e22fb859b820494c6976306106afafbe6ad84a7ba2f53936c1362e115"}]}}]}}]}}]}}, 0x0)

25.278687086s ago: executing program 3 (id=657):
write$nbd(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="6744669800000000040000000200000085b268bb25bd4f7279031e629939a91a5f4d30b17a1178e9e3d3b47b0425f73b4b8a6a4c9c46a13fef029bdeafcc583303328fae4c078beec37703060254d9334d4fefbcc5be3dd834a05b9c00b7816b57faa7a362b46b01fd2c9eb9eca507cb37db12"], 0x73)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14)
r1 = accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14, 0x40800)
mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r6 = fcntl$getown(r1, 0x9)
syz_pidfd_open(r6, 0x0)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x0, 0x0, 0x1c, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

22.12138858s ago: executing program 3 (id=675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0)

21.999507425s ago: executing program 3 (id=676):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000000180), 0x0, &(0x7f0000000400)={0x77359400}, 0x0, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
r2 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0)
ioctl$SG_SET_COMMAND_Q(r2, 0x227e, 0xfffffffffffffffe)
mmap(&(0x7f0000819000/0x3000)=nil, 0x3000, 0x3, 0x80010, r1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f00000000c0)=0x1, 0x4)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, <r6=>0xffffffffffffffff, 0x1})
r7 = socket$inet6(0xa, 0x80002, 0x7)
sendmmsg$inet(r7, &(0x7f0000004c80)=[{{&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0xfff8, @rand_addr=0x65010100}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010102}}}], 0x20}}], 0x2, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000300)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
pread64(r10, &(0x7f0000000080)=""/223, 0xdf, 0xb)
ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000001c0))
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000})

21.80646213s ago: executing program 33 (id=676):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000000180), 0x0, &(0x7f0000000400)={0x77359400}, 0x0, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
r2 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0)
ioctl$SG_SET_COMMAND_Q(r2, 0x227e, 0xfffffffffffffffe)
mmap(&(0x7f0000819000/0x3000)=nil, 0x3000, 0x3, 0x80010, r1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f00000000c0)=0x1, 0x4)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, <r6=>0xffffffffffffffff, 0x1})
r7 = socket$inet6(0xa, 0x80002, 0x7)
sendmmsg$inet(r7, &(0x7f0000004c80)=[{{&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0xfff8, @rand_addr=0x65010100}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010102}}}], 0x20}}], 0x2, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000300)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
pread64(r10, &(0x7f0000000080)=""/223, 0xdf, 0xb)
ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000001c0))
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000})

7.382943824s ago: executing program 5 (id=737):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@main=@item_012={0x1, 0x0, 0x0, "84"}, @local=@item_4={0x3, 0x2, 0x8, "2708bb2f"}, @local, @global=@item_4={0x3, 0x1, 0x6, "32b427ff"}]}}, 0x0}, 0x0)

6.625302188s ago: executing program 2 (id=739):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x4000) (async, rerun: 32)
shutdown(r1, 0x1) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @remote}}, [0xd, 0x3, 0x1, 0x4, 0x61, 0x2, 0x5, 0x1, 0xffffffffffff4de5, 0xfffffffffffeffff, 0x3, 0x5, 0x7, 0x8, 0x300000000]}, &(0x7f0000000040)=0x100)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x8802, 0x0)
write$UHID_CREATE2(r2, 0x0, 0x141)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) (async)
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee00, <r5=>0x0}}, './file0\x00'})
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@flag='silent'}]}})

6.528894392s ago: executing program 2 (id=741):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x40000, @private0, 0x400000}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001"], 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x0)
setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000015c0)={0x1, 0x2, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000380), 0x4)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)
close(r4)

6.272958923s ago: executing program 0 (id=743):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r4, 0x8}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r4, 0xdc44}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)=0x3000, 0x4) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async)
pipe2$9p(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r5, 0x0, r0, 0x0, 0x20000000000002, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x7, 0x26, 0xffffffb9, 0x1a}, 0x9c) (async)
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)=ANY=[], 0x0)

5.752851306s ago: executing program 5 (id=744):
r0 = socket(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000002000040"]) (async)
getpid() (async)
sched_setscheduler(0x0, 0x1, 0x0)
socket(0x9, 0x3, 0x4) (async, rerun: 64)
finit_module(0xffffffffffffffff, 0x0, 0x3) (async, rerun: 64)
setsockopt(r0, 0x1, 0x9, &(0x7f0000000140)="3f14b0f1", 0x4) (async, rerun: 64)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') (rerun: 64)
read$FUSE(r4, &(0x7f00000016c0)={0x2020}, 0xfffffce3)

5.635066038s ago: executing program 5 (id=745):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/custom0\x00', 0x800, 0x0)
fcntl$setsig(r1, 0xa, 0x1b)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf254400000008000320", @ANYRES32=0x0, @ANYBLOB="08000d007d060000"], 0x24}, 0x1, 0x0, 0x0, 0x54}, 0xc4011)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x94801, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000c80)=ANY=[@ANYBLOB="8c000000acb9682ed6522985e44e83dec512e7b6179ee15be44eba5e0d12f6ac548e162eaddff5270cd9805ae81769ef084c81bd1634f8a100fa6a5cddaffcb61ccbc92f54e978cf92f2da32232fd4a9dbb728a0f45d15cb948b0ad5", @ANYRES32=r1, @ANYBLOB="00012cbd7000fcdbdf250d00000008000500010000000800050000000000080004000200000010000180090006006c626c630000000050000180060001000200000008000800790d0000060002002f00000008000b00736970000800050000000000080008000200000008000900740000000c00070032000000050000000800060077727200"], 0x8c}, 0x1, 0x0, 0x0, 0xc1}, 0x20048100)
r5 = socket(0x26, 0x4, 0xc50)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x2, 0x2}, 0x10)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x14, r4, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000d0}, 0x45)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x6c}}, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r9], 0x0, 0x0, 0x0})
write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES8=r1], 0x33fe0)
r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
syz_usb_control_io$hid(r10, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0x30, 0x32, {0x32, 0x4, "97732881079f10f1382f7c2ad260e0f5dec8aab0e5df910a0000000000000053751e836ee73dadc4097bf6e2041410fa"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="00220c00000005da40441c79fcc393f5592619c5a0f79bdc3548f74a8bbf00961fd873e9c90b46bf24ce64cd13ddcb2355aca01ac5d6aca44b5f9c0ba402000000000000801287d4dfba4eae728f75ee2786bd5fe500c973b3d5e03f6c42d9aa51c9617586f679a6343cf9105ddd0d6ba8ea9bea7e1121f0056ace4d4db09ee0ac3d00c2caecd386d99014417e07ff3a5c66f068ccc763e7215298e04cbca320064b9fc8602ce4811e1e13e0eeea814b3a05af1ba5cbc7529e6a7b118c11d64d603dbe96dd"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xd9, 0x1, {0x22, 0x595}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000005c0)={0x40, 0x1, 0x98, "41e5a21a7a13716bdac7daf6e8723e8de7c38708b66cf47dcfd03ea109afb9c159fa88b4da480ac012311ebc5392b3ab0005aed3e139fc30f21a19e6f2a3faeb85550e8263b9b192accf5b3b2dd96074b6ebddfae0f6ec2ac6788e78eea7055e5158eff96d58da894e4050a21c144dd4529c62b138aa9720915d90b9f4f500bc01f23ce2ad3576fc5ff0ea2590bff5ffd1bd2be2c664b632"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfd}, &(0x7f00000006c0)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0xe}})
r11 = syz_usb_connect(0x0, 0x12a, &(0x7f0000000b80)=ANY=[@ANYBLOB="12018000d908fd40d8160468a3ee010203010982bf010100000010457d7f9256a05aefb4528e071860bcd2eebc6095992fc693bc3b3ce5764fd322b53bb893f8c798e70a33bf1d5773d28168e54955e9cd2257daea11e2bb01710a4b4fedf277be5af890f8c4e8ecdf3877e02a34dd013ddd3f412c22bdc22cf45f7043d9ff150ee76c6db9fa7488b1ba8fc8f1aa7a42f3f74f292db2d365425730306454187cfdb429da1ce7b104af00684e40a8cea8b5e996de688974f7971dc1ab91ef7afe27a8d18ce8e0e3ac965db3ab175c3ea53e4f6b"], 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_control_io$hid(r11, 0x0, 0x0)

3.954017371s ago: executing program 5 (id=748):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010001000000c2e79f760eb62f83060003"], 0x1c}}, 0x8004)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x18b7b1e20a8e0654}, 0x6)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0)

3.416979527s ago: executing program 2 (id=749):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64)
r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={<r3=>r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', <r4=>0x0, 0x20, 0x7, 0x10, 0xfffffffd, {{0x2b, 0x4, 0x1, 0x33, 0xac, 0x67, 0x0, 0x3, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@lsrr={0x83, 0xb, 0xd, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0x8a, 0x3, 0x1, [{@multicast2, 0x2}, {@remote, 0x10}, {@rand_addr=0x64010102, 0x100}, {@remote, 0x7}, {@private=0xa010102, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@broadcast, 0x2}, {@broadcast, 0x3}, {@private=0xa010102, 0x6}]}, @generic={0x89, 0x6, "703fa908"}, @ssrr={0x89, 0xf, 0x9, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x14, 0x49, 0x1, 0x4, [{@multicast1, 0x7}, {@multicast2, 0x5}]}, @ssrr={0x89, 0x17, 0xaf, [@empty, @private=0xa010102, @broadcast, @remote, @loopback]}]}}}}})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @random="b1a3437b2c45"}, 0x10) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async)
r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="92010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8=0x0], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x8000, 0x84040) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async, rerun: 64)
r7 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64)
setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, 0x0, &(0x7f0000000340)) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async, rerun: 32)
ioctl$VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f0000000340)={0x3, 0x27f}) (async, rerun: 32)
syz_usb_control_io$printer(r5, 0x0, 0x0)

3.222034404s ago: executing program 0 (id=750):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000240)="b700000006000000000000f1dd0fccd5de05cc4f4d20032894527f85890571a6d3eb420f1c0e6f588418aa494519c0d8eab654e0375dedcada607d19c0049fc077dbb243e6090275c68a038fb043713e303e918230ba9623570a2ed6280b4d96eafc29fdbd8200ebc5f0f329e17636491887307fdae9d6f0ce66ae3605e1f9931d6b04a74dec5d6ff475f8d98155ddceeedc0592a8d88346792bf60a5d9fa30d3455c8460534ed10fcdbe3db631d12a45f8edb3e97fa5c09ba1a", 0xba}, {&(0x7f0000000100)="37a8a6c41ef711513a5554633f6ecf4ca35059861383c2d93a40f271a763e9cde09d5b26a1b450b212fabe8c30262c985f5dc02152ee93c90e30599348", 0x3d}], 0x3)

3.166733763s ago: executing program 2 (id=751):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000e80)="0d1868", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001080)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000540)="a8d57a", 0x3}, {&(0x7f0000000640)="4a3f860bc1fa52eb20ffbe11d0e6c2cb52cb6ce07642d163970338b21e462bc7b24a57f9c1a455c3ecf7fbb2497f7061ee7dd565eb2647a68e2fedbeb610d192fb376e943e8ce37255b42eecca6d77e736b875074a7f0342c3ce485b9db7971cbb81e88b5f1bb2e166a92fc09093f474d24a2aef92ced6547106eb70a75b90468c6f469cf9fe0081d44e30e9657e01af4bb05bb631eeb3c71b011373", 0x9c}, {&(0x7f0000000700)="e3f1fd9cb0aea2135833d52f8a4b56ae53ab00c08d71f20d6af236a2a3717fb6467b10", 0x23}], 0x3}}], 0x3, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000380)={0x40, 0xd, 0x88, {0x88, 0x24, "d443421869cbb1424b9ae980cfe4361a7096e113eb59591426167206b8b54d8489848b2b6d48d16140fcf662463038bd3039d0d497fa94fe97bb2ce62e706ba71608f499e265c39c30f00f4381d3c960798f09d5690b5c0e4e5c70f8289b614c725bce94efe188c1f73a02da4b16ffc14427634c6573b916be5fc5e754f5cbb237eda485b61c"}}, &(0x7f0000000440)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "8cd8dfb425dc30e9de99c0c37fbbcb4ec8f37930b277fb9d3d6cea287d908eff0271ce77406c81a8e083feb52fb5d851a118b4714f9c54be14cca3a206fdd28b21127dfde6345403814ddf9d19598549e375420c26f656fadf34ce77beded4cd7f34b1bb5bcd99535466810496034e89c7cadd2b6ad10ca3610264faf7ccaf295d1ccfb7ee18ae3d4ada860507d18c9f53008490165c8c3e1582eeba9476c5dfedd6e171eb34c1bf8b4bc24fb507ad51c61a04eebf1b6613dfdda2b2b491a97f9c1c1e2d2b13060be60e5788c68e7fbf893a9a92d6ca107311e19d34c736a58d8b7cb6cbcc92b06d0db6e4fa04f3ac004b328c"}}}, &(0x7f0000000740)={0x34, &(0x7f0000000580)={0x20, 0xe, 0xe, "2e2f0baa212e4c6c0cc93b4cb888"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xaa}, &(0x7f0000000640)={0x20, 0x0, 0x57, {0x55, "2bce15a7c239917a11521c32d163adaa58688be97d2831652af6301333faa5add025e287d837ab92914de933497c5672723b578335b599c29986b4288bf00ecf420a69d8fa2b97c28e35649dc97cd1047189100bf0"}}, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000700)={0x20, 0x0, 0x1, 0x6}})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0xf, 0x59, &(0x7f0000000300)="25bd758832b0fcf07d1b4d90e5c0833943f5f92b1f7dd9b46b7569cc6223379bdc6432b1a73d1170b5e9851ff585e88a9c98df6abd95ae5a4592b4438bbb8b88cfcd61a4048fb6727233d933b4d19c687de6339f0153bb8a1b")
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="40007d0000007d09a4950c79660f1b41a95a98df6e5a3b2d8e7001a58d7f6be8e134b96fbc8beb84e0f9d9122159b0a0df6d3e80bc7effeb412d9803994164836f2f0a45c92347c3b833eb31a7e07f9aff289ec7558e453c4fc2be639c3667c0b39ce8b43f8746012474bad67bb698b019aa1c756a3b4401a3404f09d37f9862ce51aa"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x40, 0x0, 0x7c, "03603a629ec97bcf28bb9eb0373aff205406e4a56d55cfb7bdbd865e36d90e090ab71f9312c37036f0bdbf6bef03f274742303f14ecf7af619be0c6997e4070c33296b2857311b838e306a463e113f22f5187c32b4c649574154bf719534ed0f577e651cb2826947b7b4557b147f6744842f2c00a076ecc104e14d73"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x4d}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="9418e7b73e84", 0x0, 0x3, 0x10000, 0x22, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0x14, &(0x7f0000000780)={0x0, 0xe, 0x91, {0x91, 0x3, "d28839a721e18f44438a0e97f98022983b3ecf344b246ec71b62072f10ab33cf625acb2b8f2dcaf9491bf00921edf12b0b5a985ea083fba5c763a6504b26371b808c2fd6560a1469a01e22b93a347ede236ea77fa83d82c07b397a23bc78555d4cb730e2ceb01e04d3c4cf87b678bb91da1cf80f6989a5b128f8b78e8bedf86187f2749334a1039e99b60680c75fc7"}}, &(0x7f0000000840)={0x0, 0x3, 0x43, @string={0x43, 0x3, "c745a1716faace25eab755f359a3034841f24e4d7731f48fdef69c9271f532ccc899e4b4c572ed4b61f850781abe32626ab8808fa19c6420a1ff4e33b1f0da930e"}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)={0x0, 0xa, 0x74, "f1683d6b26b181c7832af7155c38405a18043922a900a781a977652866abbc85f4f982dae8c66031d4f3ea8e89919728df0d7210337de2e6e2230b8929496682932c6920c869f644458d12b3aa8fff3dc0f2eb623f2cef89d1d2e6d6b8558bc86345754e4be3120e3a20c82ba1926b72f92c4a1e"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x89}, &(0x7f00000009c0)={0xc0, 0x5, 0x4, "2e2536c3"}, &(0x7f0000000a00)={0x40, 0x5, 0x4, "3f00d02f"}})
syz_usb_control_io$hid(r1, &(0x7f0000000f80)={0x24, &(0x7f0000000d80)={0x20, 0x30, 0x3b, {0x3b, 0x23, "6401922ae3914e4464930eabd3b1b855acdf9b3d069de25110a9189b8ecdfbd5c552670e6a8ebc59a3c91a2e485a24bf0f977d5986d5a4ced6"}}, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000f00)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x2, "68f68c95"}, @main=@item_012={0x2, 0x0, 0xb, "0a7f"}, @local=@item_012={0x0, 0x2, 0x5}, @global=@item_4={0x3, 0x1, 0x5, "020ef9be"}]}}, &(0x7f00000012c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x12d}}}}, &(0x7f0000001200)={0x2c, &(0x7f0000000fc0)={0x0, 0xf, 0xa1, "7e2075f8bc6148dd084666e7c40c719f003c57e0baa231930428199df4caa96c7077a25b10f1e089d7cbdc2d630c3c9e629f4f686013ad5a8d055fa884a90486367707ac17df9d923818438ca43fe7cbcfe5458b5f9c438bc409ee53dfd4c612144f36a29569321c8f96af6ad7837c7e38d3982abf2d080192b8580cc132bd154212b9d090a59f34f8212bada49fcbf1ea1134a660f36050c6e831b20917365b38"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000001100)={0x20, 0x1, 0x8b, "4610d97ecf48e8d6cd1fe2e042b1535dd80c5624cedb9673c67e9d0b3239c83ad4951737791c6c4585a46f125c24ebd06f3477fc6eedb97923f442c4f97491dbf5946f3c8ec90b451e0c4dbde23190cd9a97530599c21dc5b9d96d04dc84fe6c08689841e292a57643d3aa5c279adab4db063b832ace4b4d5ba41c832313f34958b068506af8a549820951"}, &(0x7f00000011c0)={0x20, 0x3, 0x1, 0x4}})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4, 0xffffffff}}, 0x10)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000b40)={0x14, &(0x7f0000000a80)={0x0, 0x23, 0x2d, {0x2d, 0x4, "11dcb546861b5a2e5e4781ead1312e82ef3b7e8067f090177144787fa41982c292673a3bd7cb81ee3fb7ce"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "9b654b51811d2f359b4c8d851731928efb8f454cfd52fd15c0d89025baea1e94fe4e1cdf595f0e3b18c0e2f9f9aa906f33acac9ed0408d0602"}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b80)={0x30, 0x10, 0xac, "484aa895fa10bf29f589cbd9f8ff012df6443ff35cce6693f29b0a3e1dc46dab611512158035d3033fac9fd276bfd21b38d412cb3cd155ae3c4b9ec74996472e6acc243efa33d36cff879bfa3d784ed8eefea6b46ad461973c3df64099cbfa011dd60e622afb08fde76ddfd3a04c83888984a130b8a2cc8a6246913757d3f25c02ec6106a88a04b5529653714f503c2a70fc5f8a5f38971a81fa402053fde64ee090982382b2d00e68ed6b52"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000cc0)={0xc0, 0x5, 0x5, "373f294a1c"}, &(0x7f0000000d00)={0x40, 0x5, 0x4, "854471a9"}})

3.037749335s ago: executing program 5 (id=752):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='f2fs\x00', 0x0, &(0x7f00000035c0)='qu/ta')

2.961257431s ago: executing program 0 (id=753):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r2, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000c40)={0x8, {"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", 0xbd}}, 0x1006)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0)

2.958447363s ago: executing program 5 (id=754):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000997aa910c6250290ba79010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
r2 = timerfd_create(0x0, 0x56be55277bd338ca)
clock_adjtime(0x3, &(0x7f0000000100)={0x5, 0xffffffffffffffff, 0xb8000000, 0x6, 0x8, 0xd00000000, 0x7af, 0x4, 0x7, 0x101, 0x3, 0x3ff, 0x8000000000000001, 0x5, 0x0, 0x100000000, 0x3, 0xfffffffffffffff8, 0x1b, 0x7fffffff, 0x8, 0x1, 0xc54, 0x7, 0x0, 0xffffffffffffff62})
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
timerfd_settime(r2, 0x2, &(0x7f0000000080)={{0x0, 0x3938700}, {r3, r4+10000000}}, &(0x7f00000000c0))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x486400, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_opts(r6, 0x0, 0xd, 0x0, &(0x7f0000002180))
ppoll(&(0x7f0000000240)=[{r2, 0x208}, {r2}, {r2, 0x302c}, {r5, 0x20}, {r2, 0x20}, {r2, 0x80}, {r6, 0x80a0}, {r2, 0x40}], 0x8, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x81]}, 0x8)
fcntl$dupfd(r2, 0x406, r2)

2.268043405s ago: executing program 4 (id=758):
r0 = socket(0x1e, 0x805, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003800), 0x2080, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000003840)={0x15, 0x0, [{0x2, 0x25, 0x1, 0x1, 0xe9, 0x1, 0x5}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
read(r5, &(0x7f0000000100)=""/187, 0xbb)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r6=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', <r7=>0x0}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) (async)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)
r11 = accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x80800)
sendmsg$nl_route_sched_retired(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x470, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xb, 0xc}, {0xe, 0xf}, {0x0, 0xfff1}}, [@c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_FD={0x8, 0x1, r11}]}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x1, 0x8, 0x0, 0x5, 0x6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x2, 0x6, 0x8, 0x7fffffff, 0x9}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0xffffffff, 0x9, 0x35, 0x0, 0x0, 0x7, 0xc, 0x13be, 0x5, 0x4, 0x2, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x8, 0xffffffff, 0x3, 0x9c, 0x5, 0x6, 0x10000, 0x10, 0x7, 0x8, 0x0, 0x8001, 0x800, 0x9, 0x4, 0x88, 0x9, 0x8001, 0x2, 0xaa, 0x10000, 0x4, 0x37f, 0x4, 0x120, 0x5, 0x3, 0x40, 0x5, 0x3, 0x100, 0x5, 0x8001, 0x9, 0x1, 0x10001, 0x2, 0x2, 0xfffffffa, 0x2, 0x1, 0x8, 0x7, 0x200, 0xffffff00, 0x2, 0xfff, 0x1, 0x9, 0xe2, 0x8, 0x0, 0x4, 0x101, 0x8, 0xfffffffe, 0x1000, 0x7, 0xb9, 0x80, 0x1, 0x9b, 0x2, 0xa0, 0x2, 0x5, 0x3, 0x2, 0x2, 0x1, 0x9, 0x2, 0x143d, 0x2, 0x95, 0x5, 0x7, 0x5, 0xfff, 0xb, 0x4a23, 0x0, 0x3, 0x2, 0x859, 0x1, 0x40c1, 0xffff, 0x80000000, 0xff, 0x5, 0x400, 0x272, 0x101, 0x9, 0x4, 0x9, 0xfe0, 0xe7e, 0x4, 0x36d56aa3, 0xf3ec, 0x9, 0x80000000, 0x5, 0x8, 0x100, 0x3, 0x100, 0x3, 0x8, 0x7, 0x31, 0x5, 0x5, 0x14, 0x100, 0x4, 0x8, 0x1, 0x3, 0xffff, 0x7, 0x80, 0x9, 0x8, 0x4, 0x3, 0xffff, 0x3, 0x100, 0x7f, 0x9, 0x8, 0x7, 0x1, 0x7fff, 0x3, 0x0, 0x26e, 0x4f, 0x7, 0x79ea, 0x9, 0x4, 0x7, 0x5, 0x7, 0xc6, 0x3, 0x855, 0xfffffff8, 0x9, 0x777, 0x6, 0x6, 0x4, 0x9, 0x10, 0x8d93, 0x8, 0x7, 0x9, 0x9, 0xd3b, 0x1, 0xfc9, 0x1000, 0x3, 0x8, 0x7, 0x0, 0x8001, 0x800, 0xff, 0x8, 0x5, 0x279, 0x7d, 0x3, 0x7, 0x0, 0x9, 0x8, 0x1a35, 0x93, 0x9, 0x10, 0x0, 0x0, 0xe, 0x0, 0x7, 0xffff, 0x1, 0x3, 0x7, 0xf7, 0x8, 0x1, 0x3, 0x101, 0x6, 0x6491, 0x1, 0x6, 0x8, 0x7, 0x400, 0x1, 0x8, 0x1ca0000, 0x8, 0x8, 0xadc, 0x8, 0x5, 0x2, 0x0, 0x3, 0x7, 0x1, 0x2f, 0xfffffe00, 0x0, 0x5, 0xaa, 0x80000000, 0x9e7, 0x0, 0x8, 0x2, 0x6d, 0x8, 0xffffffff, 0xeb87, 0x6, 0x3, 0x79]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x40000}, 0x48050)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r13=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', <r14=>0x0, 0x29, 0x60, 0x8, 0x1, 0x2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x1, 0x3}}) (async)
r15 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r16=>0x0})
setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) (async)
sendto$packet(r15, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r16, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', <r17=>0x0, 0x4, 0x1, 0x70, 0x6, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x7, 0x7800, 0x20000000, 0x3}})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000680)={0x628, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x5, 0x95, 0x4}, {0x9, 0x5, 0x2, 0x7}, {0x3, 0xfd, 0x0, 0x9}, {0x3ff, 0x3, 0x1, 0x75}, {0x9317, 0x9, 0xd, 0x1}, {0xc, 0x61, 0x9, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r7}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4943}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r13}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0xc1, 0x0, 0x101}, {0x400, 0x6, 0x7e, 0x4}, {0x5, 0x0, 0x5, 0x200}, {0x8, 0x3, 0x3, 0x4}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xaed, 0x8, 0xf5, 0xff}, {0x80, 0x6, 0x7, 0x2a1}, {0xf000, 0x0, 0xa9, 0x85e}, {0x4, 0x0, 0x4, 0x80000001}, {0x8, 0xff, 0x48, 0x80000001}, {0x5, 0xe0, 0x26, 0x4}, {0x7, 0x6, 0x2, 0x7}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r17}}}]}}]}, 0x628}, 0x1, 0x0, 0x0, 0x3}, 0x4004000) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x9c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x28, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "39843dd44563878d5bdb29eaaa27b1173ab8d3fc7fa701500211"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

2.040005328s ago: executing program 4 (id=759):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x428800, 0x11)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', r0, &(0x7f00000007c0)='./file7\x00', 0x0)

1.905293825s ago: executing program 4 (id=760):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x5, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10, "", "ca"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, "f7e04239"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

1.085364961s ago: executing program 0 (id=761):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000240)="b700000006000000000000f1dd0fccd5de05cc4f4d20032894527f85890571a6d3eb420f1c0e6f588418aa494519c0d8eab654e0375dedcada607d19c0049fc077dbb243e6090275c68a038fb043713e303e918230ba9623570a2ed6280b4d96eafc29fdbd8200ebc5f0f329e17636491887307fdae9d6f0ce66ae3605e1f9931d6b04a74dec5d6ff475f8d98155ddceeedc0592a8d88346792bf60a5d9fa30d3455c8460534ed10fcdbe3db631d12a45f8edb3e97fa5c09ba1a", 0xba}, {&(0x7f0000000100)="37a8a6c41ef711513a5554633f6ecf4ca35059861383c2d93a40f271a763e9cde09d5b26a1b450b212fabe8c30262c985f5dc02152ee93c90e30599348", 0x3d}], 0x3)

950.874715ms ago: executing program 0 (id=762):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000140)=0x2)
r1 = dup(r0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x6, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c528400", @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf25020000000800090002000000"], 0x1c}}, 0x40)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0xfffffffffffffe2f)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x3f, 0xfffffffd, 0x5}, 0x9c)
ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040))
sendto$inet(r1, &(0x7f0000000400)='X', 0x1, 0x8884, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x30, r8, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'\x00', <r10=>0x0})
sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000500)="5a2ccb3c3d64be1c75d2e428c86f262915982a151add202e3eb4273e8dffdb9f0a55838ce212a7c79957801c9773a2a4f35ec287ecab7a666054c1b30110afc179d10a6f63f42588e4ca262d057b91f397a6fbdcf97b45edcccf6339d19ba1587e5abead173741a81c44d8ff23a1f316fb314f2e541f8ad532b5dab38d589940b0925d726be691a5112ed4561280a5718f184600760aa2d9a8d305b2e53f309e84d3dab846a8137272d4c854d651de72c4d81b2cb796fd324bd1bde73edf6584adf27903524a7243cc25520f7268d778763f1daead070b8657459dac65ff4a1ee0", 0xe1}, {&(0x7f0000000280)="834b7810dad400337c36431d34b0a861d16b435d093a3ee1205117bf2316b8ea3b91daea38c4e9ffa665d1adbf5ada2facb0ee940b95364ef47ad813b6e477df03a4c489cee8716983706e5e5171bc3de5db5f723073940230c9f8bf4f0ba1ec1fb6a40be2fbffa64c63ae6b96767e7e68fd9ac863", 0x75}], 0x2, &(0x7f0000000840)=[@dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x5}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x87, 0x0, '\x00', [@generic={0x2, 0x2, "d109"}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r10}}}, @rthdr={{0x98, 0x29, 0x39, {0x2c, 0x10, 0x0, 0xb, 0x0, [@mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x2b, 0x12, 0x0, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x9, 0x8, [0x6, 0x0, 0x800, 0xe000, 0x8, 0x5f22, 0x8001]}}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @jumbo={0xc2, 0x4, 0x14}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @pad1]}}}, @rthdr={{0x88, 0x29, 0x39, {0x6, 0xe, 0x0, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x11}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x26}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1000}}], 0x2c8}}], 0x1, 0x40)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xfffffff2, @empty, 0xef6}}, 0x1000000, 0x31, 0xffff1896, 0x4, 0xad, 0x0, 0x1c}, 0x9c)

557.353306ms ago: executing program 4 (id=763):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005e000d0025bd70000000000008000000010000000e"], 0x28}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005e000d0025bd70000000000008000000010000000e"], 0x28}], 0x1}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) (async)

478.601948ms ago: executing program 0 (id=764):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
truncate(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=@getae={0x98, 0x1f, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in=@loopback, 0x4d2, 0x2, 0x46}, @in=@rand_addr=0x64010100, 0xc, 0x3506}, [@algo_aead={0x4c, 0x12, {{'gcm-aes-ce\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x8000}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x9)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r4, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xc, 0x0, 0xee01}, 0x6e6bb9}}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0)
socketpair(0x18, 0x6, 0x3, &(0x7f0000000040))
syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a8008009040000010300"], 0x0)

298.402682ms ago: executing program 4 (id=765):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r1}, "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"})
r2 = socket$caif_seqpacket(0x25, 0x5, 0x2)
setsockopt(r2, 0x0, 0xa5, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}}, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]})
ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040))
getsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001200)={0x1e0, 0x10, 0x1, 0x70bd27, 0x0, "", [@typed={0xc5, 0x0, 0x0, 0x0, @binary="e711d24f2de8d564a9679a422363e62106d028d4969dcac8e6575da9ba9307d2b679d872c7ed5836e09b0cb6f29963293eae9c31ca4dcfac7ce8af2de1269ba97954e6ca4d006db7c55b9ee892cf9042e4efc3c6f926a6f81f38bd3868fd81e69d76de4d91ae7030c5ed2247911344563c6d22fa9c3dc80afdc3fcec9e71b63347272521470c27fc72eb78b89830efcdfbd4ba7930f2d383330c01e4927dd36402138be4c1b8d0a324788911047061093dae8abc4ea6481e2f5602a2f82affae9d"}, @typed={0x100, 0x0, 0x0, 0x0, @binary="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"}, @nested={0x8, 0x2b, 0x0, 0x1, [@typed={0x4, 0x1}]}]}, 0x1e0}], 0x1}, 0x8008)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x8})

92.659374ms ago: executing program 4 (id=766):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000e40)="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", 0x194}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633cbee8126a200"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990", 0xa5}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x2c020400)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
write$P9_RGETLOCK(r3, &(0x7f0000001440)=ANY=[], 0xffffff6a)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x8004f27, 0xd4b, 0x2, 0x401, 0x1, 0xcc7, 0x7, 0x5c952399, 0x5, 0x3ff, 0x2, 0xc986, 0x74, 0x18, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x1ff, 0x6, 0xf7fffffd, 0x401, 0x20001e56, 0xfffffffc, 0x0, 0x2, 0x8, 0x4, 0x8000000, 0xdffffffa]})
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
tee(r2, r5, 0xfffffffffffffc01, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001740)=""/4110, 0x100e}, {&(0x7f00000000c0)=""/230, 0xe6}], 0x2}, 0x10020)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x110, 0x2, 0xa1, 0x10001, 0x0})
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x38, 0x24, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x27, 0x0, 0x1, [@nested={0xc, 0x11d, 0x0, 0x1, [@nested={0x4, 0x6}, @generic="3c56f851"]}]}]}]}, 0x38}], 0x1}, 0x0)
socket$kcm(0x2, 0x3, 0x84) (async)
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000e40)="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", 0x194}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990", 0xa5}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
unshare(0x2c020400) (async)
pipe2(&(0x7f0000000040), 0x800) (async)
write$P9_RGETLOCK(r3, &(0x7f0000001440)=ANY=[], 0xffffff6a) (async)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x8004f27, 0xd4b, 0x2, 0x401, 0x1, 0xcc7, 0x7, 0x5c952399, 0x5, 0x3ff, 0x2, 0xc986, 0x74, 0x18, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x1ff, 0x6, 0xf7fffffd, 0x401, 0x20001e56, 0xfffffffc, 0x0, 0x2, 0x8, 0x4, 0x8000000, 0xdffffffa]}) (async)
pipe2(&(0x7f0000000080), 0x0) (async)
tee(r2, r5, 0xfffffffffffffc01, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
recvmsg(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001740)=""/4110, 0x100e}, {&(0x7f00000000c0)=""/230, 0xe6}], 0x2}, 0x10020) (async)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async)
ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x110, 0x2, 0xa1, 0x10001, 0x0}) (async)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x38, 0x24, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x27, 0x0, 0x1, [@nested={0xc, 0x11d, 0x0, 0x1, [@nested={0x4, 0x6}, @generic="3c56f851"]}]}]}]}, 0x38}], 0x1}, 0x0) (async)

91.64519ms ago: executing program 2 (id=767):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB='Z', @ANYRESDEC, @ANYRES16=r0, @ANYRES32=r0], 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r4, 0x8b2c, &(0x7f0000000040)) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r5 = socket$key(0xf, 0x3, 0x2) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', <r8=>0x0})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)={0x3c, 0x1c, 0x400, 0x70bd28, 0x25dfdbfc, "", [@nested={0x1c, 0x91, 0x0, 0x1, [@typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x15}]}, @nested={0x10, 0x66, 0x0, 0x1, [@nested={0x4, 0x49}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x80}, 0x4004000) (async)
sendto$packet(r7, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) (async)
sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) (async)
r9 = socket$caif_seqpacket(0x25, 0x5, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r9, 0x116, 0x80, &(0x7f00000000c0)="49be50757c38efacce8d0940d6c36d0efdaeb8e7c85d61bc34b4bd8f13acc0b238028cab7d7b6ab44c0a491bcef29e1521bf5fda0cf294d6d017191519e736a3f3489d023c7617fb7c48872043144cd3d673fe3250969a9d5ec641c30c432240a04853546a4983970cdc44e5fa00bd585d40144ba0a18a32bf0d54fb5423119c916b367c31035e77f961", 0x8a) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xcd20}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (async)
r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
preadv(r11, &(0x7f0000000200)=[{&(0x7f00000012c0)=""/166, 0xb3}], 0x1, 0x7fb, 0x233)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESHEX=r11, @ANYRES16=r9], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)

0s ago: executing program 2 (id=768):
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r0, r1, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000002640)=[@code={0xa, 0x84, {"48b88ee50000000000000f23d80f21f835c00000f00f23f8460f01a148b819000000000000000f23d00f21f835300000050f23f864f3400f01ea66b83f01b88e3e470ff3b900000000b805000000b9f1b27d040f01d966660fc7b4925f0000000f20e0f30fc7300f22e0c4a5112982ae900000"}}], 0x84})
syz_kvm_add_vcpu$x86(r4, &(0x7f0000000280)={0x0, &(0x7f0000000000)=[@rdmsr={0x32, 0x18, {0x85f}}, @uexit={0x0, 0x18, 0x6}, @rdmsr={0x32, 0x18, {0xb87}}, @cpuid={0x14, 0x18, {0x37, 0x5}}, @code={0xa, 0x74, {"66b898000f00d066450f38817fc466ba420066ed36652666420f29fd2e660f3881a70050000066baf80cb8273ef682ef66bafc0cec0f20e035000001000f22e0660f44b10001c0fec401e9de4c818066baf80cb858bc8286ef66bafc0c66b8005066ef"}}, @code={0xa, 0x71, {"0f5c1ab94e0800000f3266baf80cb8486e9886ef66bafc0c66b807ce66efcf26430f0099f69f0000b805000000b9000000800f01d9c42129d10b66b828008ed048b807740000000000000f23d00f21f8351000000f0f23f8f20f01990a000000"}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x14, 0x18, {0xc, 0xfffffff8}}, @wr_crn={0x46, 0x20, {0x4}}, @uexit={0x0, 0x18, 0x1000}, @wr_crn={0x46, 0x20, {0x3, 0x8000}}, @wrmsr={0x1e, 0x20, {0x978, 0xd}}, @rdmsr={0x32, 0x18, {0x631}}, @code={0xa, 0x60, {"66ba200066b8000066ef670f01d1f2420fc2ec0db9910a00000f326546d9f9b94e0800000f322e360f01c5b8010000000f01d948b88e380000000000000f23d00f21f8351000000d0f23f8f30f001b"}}], 0x27d})

kernel console output (not intermixed with test programs):

 usb 3-1: USB disconnect, device number 52
[  183.013273][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  183.024802][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[  183.045030][   T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  183.065433][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  183.075024][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.088934][   T24] usb 2-1: Product: syz
[  183.094570][   T24] usb 2-1: Manufacturer: syz
[  183.102902][   T24] usb 2-1: SerialNumber: syz
[  183.339103][   T24] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  183.348267][   T24] usb 2-1: unit 51 not found!
[  183.362163][   T24] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  183.375964][   T24] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  183.433791][   T24] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  183.462928][   T24] usb 2-1: USB disconnect, device number 55
[  183.545962][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  183.766314][ T7349] netlink: 'syz.0.406': attribute type 1 has an invalid length.
[  183.879494][   T43] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  184.035526][   T43] usb 3-1: config 2 has an invalid interface number: 24 but max is 1
[  184.044422][   T43] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  184.055129][   T43] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2
[  184.064591][   T43] usb 3-1: config 2 has no interface number 0
[  184.071251][   T43] usb 3-1: config 2 interface 24 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  184.084831][   T43] usb 3-1: config 2 interface 24 has no altsetting 0
[  184.094787][   T43] usb 3-1: New USB device found, idVendor=0baf, idProduct=00fa, bcdDevice=29.a7
[  184.105825][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.113971][   T43] usb 3-1: Product: ည
[  184.118194][   T43] usb 3-1: Manufacturer: 凂勗⠰膥觎唧摼#㑾悿헴矄⩩缕а㈅㌭◪鮚薵绍퀶ﱉ摦➸列톨遈寙챩單抐눿ᖈᄵ⌠暳䒜ꆳ╌ꔯ㹤厣瀿齹礋蠣劬巇믷ᇧ辬಩汲ꋘ帄ꄦ篤簦➳䝜চ콇㙟޴웏꥜领袐셵ꛜ娱뼏쒨큰쭫᣹ꎞ鼬썮䌪੶㨒篦ⵊ灸캠老牥즨¯䮶ᩒ⧩꯺捎ᱤꑨ䖜錡鉩蠨熭릀᪇
[  184.151446][   T43] usb 3-1: SerialNumber: 墪᪭ᰞ﯎䡖昢鿡圔쥝悋踦栔ೝᘜ⥯蟥㫲攖⚛ﴏ뗂ᓃ㙝梫梌쬊㯵휇웮䌡㐚쾀猞毻更唢꧛ᾩ슊䝺ꒂ䄕式㒒刘鑫컭⹅몀곒송酂⑐皡촥㞍㬢䨡﮿滼ﴫ枷偠쐁谵呏ᷧ뙾ঢ়쨀ө쮤ᷦꇢ㧇⾰鞚汆阣ց鈪⇛⽾ᩉ芴춍軣
[  184.159781][   T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  184.194877][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'.
[  184.198721][   T30] audit: type=1326 audit(1757884368.370:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc758eba9 code=0x7ffc0000
[  184.229389][   T30] audit: type=1326 audit(1757884368.370:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc758eba9 code=0x7ffc0000
[  184.252380][   T30] audit: type=1326 audit(1757884368.370:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7effc758eba9 code=0x7ffc0000
[  184.276299][   T30] audit: type=1326 audit(1757884368.370:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc758eba9 code=0x7ffc0000
[  184.299094][   T30] audit: type=1326 audit(1757884368.370:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effc758eba9 code=0x7ffc0000
[  184.324739][   T30] audit: type=1326 audit(1757884368.370:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc758eba9 code=0x7ffc0000
[  184.348436][   T30] audit: type=1326 audit(1757884368.370:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7effc758eba9 code=0x7ffc0000
[  184.385489][   T10] usb 2-1: Using ep0 maxpacket: 32
[  184.393640][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.410885][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  184.422694][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.436099][   T10] usb 2-1: config 0 descriptor??
[  184.450570][   T10] hub 2-1:0.0: USB hub found
[  184.486799][   T43] usb 3-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XFA) Rev (0X29A7): Eagle I
[  184.647243][   T10] hub 2-1:0.0: 1 port detected
[  184.652470][ T5958] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  184.700318][   T10] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  184.719282][   T10] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  184.738929][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  184.747690][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  184.784017][   T10] usb 2-1: USB disconnect, device number 56
[  184.809444][ T5958] usb 1-1: Using ep0 maxpacket: 16
[  184.826478][ T5958] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  184.835626][ T5958] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  184.846010][ T5958] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.856368][ T5958] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  184.868025][ T5958] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  184.886040][ T5958] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  184.900274][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.908431][ T5958] usb 1-1: Product: ͅ彨豠ᡧ햦㳅聘뀑껭
[  184.927941][ T5958] usb 1-1: Manufacturer: ᰊ
[  184.933783][ T5958] usb 1-1: SerialNumber: syz
[  185.132573][   T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  185.286820][   T43] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware
[  185.302967][   T43] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[  185.303885][   T24] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[  185.325390][   T24] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[  185.330028][   T10] usb 2-1: Using ep0 maxpacket: 8
[  185.340926][   T43] usb 3-1: USB disconnect, device number 53
[  185.353395][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  185.360961][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.381027][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.387548][   T10] usb 2-1: config 8 has an invalid interface number: 255 but max is 0
[  185.403643][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.407658][   T10] usb 2-1: config 8 has no interface number 0
[  185.437806][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.443655][   T10] usb 2-1: config 8 interface 255 has no altsetting 0
[  185.466378][   T10] usb 2-1: string descriptor 0 read error: -22
[  185.474153][   T10] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  185.486278][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.509494][  T981] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  185.672236][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.689903][  T981] usb 4-1: Using ep0 maxpacket: 16
[  185.703781][   T43] hid-generic 0003:4C3259B2:0001.000F: unknown main item tag 0x0
[  185.709721][  T981] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  185.716116][   T43] hid-generic 0003:4C3259B2:0001.000F: unknown main item tag 0x0
[  185.724837][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.738156][   T43] hid-generic 0003:4C3259B2:0001.000F: unknown main item tag 0x0
[  185.743733][  T981] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  185.758747][   T43] hid-generic 0003:4C3259B2:0001.000F: unknown main item tag 0x0
[  185.758811][   T43] hid-generic 0003:4C3259B2:0001.000F: unknown main item tag 0x0
[  185.758842][   T43] hid-generic 0003:4C3259B2:0001.000F: unknown main item tag 0x0
[  185.778067][  T981] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  185.796308][   T43] hid-generic 0003:4C3259B2:0001.000F: unknown main item tag 0x0
[  185.807132][  T981] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  185.816920][  T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.825793][  T981] usb 4-1: Product: syz
[  185.830693][  T981] usb 4-1: Manufacturer: syz
[  185.835464][  T981] usb 4-1: SerialNumber: syz
[  185.857573][   T43] hid-generic 0003:4C3259B2:0001.000F: unknown main item tag 0x0
[  185.872922][   T43] hid-generic 0003:4C3259B2:0001.000F: unknown main item tag 0x0
[  185.902766][   T43] hid-generic 0003:4C3259B2:0001.000F: hidraw0: USB HID v0.ff Device [syz0] on syz0
[  185.947730][ T5958] usb 1-1: 0:2 : does not exist
[  186.005899][ T5958] usb 1-1: USB disconnect, device number 48
[  186.023931][   T10] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00.
[  186.052713][ T7398] netlink: 'syz.2.420': attribute type 6 has an invalid length.
[  186.101451][ T7395] fido_id[7395]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  186.142194][   T10] usb 2-1: USB disconnect, device number 57
[  186.254583][ T7400] netlink: 'syz.2.421': attribute type 28 has an invalid length.
[  186.268569][  T981] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  186.506867][ T7408] netlink: 'syz.2.423': attribute type 10 has an invalid length.
[  186.525611][ T7408] batman_adv: batadv0: Adding interface: team0
[  186.538303][ T7408] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.596661][ T7408] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  186.647296][ T7408] netlink: 'syz.2.423': attribute type 10 has an invalid length.
[  186.657378][ T7411] netlink: 220 bytes leftover after parsing attributes in process `syz.0.424'.
[  186.668425][ T7408] netlink: 2 bytes leftover after parsing attributes in process `syz.2.423'.
[  186.679529][ T7408] team0: entered promiscuous mode
[  186.690178][ T7408] team_slave_0: entered promiscuous mode
[  186.696128][ T7408] team_slave_1: entered promiscuous mode
[  186.707437][ T7408] 8021q: adding VLAN 0 to HW filter on device team0
[  186.715074][ T7408] batman_adv: batadv0: Interface activated: team0
[  186.722334][ T7408] batman_adv: batadv0: Interface deactivated: team0
[  186.730351][ T7408] batman_adv: batadv0: Removing interface: team0
[  186.745602][ T7408] bridge0: port 3(team0) entered blocking state
[  186.768990][ T7408] bridge0: port 3(team0) entered disabled state
[  186.778154][ T7408] team0: entered allmulticast mode
[  186.798086][ T7408] team_slave_0: entered allmulticast mode
[  186.804610][ T7408] team_slave_1: entered allmulticast mode
[  186.815848][ T7408] bridge0: port 3(team0) entered blocking state
[  186.822461][ T7408] bridge0: port 3(team0) entered forwarding state
[  186.915257][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'.
[  187.303086][  T981] usb 4-1: 2:1: cannot get freq at ep 0x82
[  187.370140][  T981] usb 4-1: USB disconnect, device number 55
[  187.383130][   T43] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  187.560221][   T43] usb 2-1: Using ep0 maxpacket: 32
[  187.567734][   T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  187.576386][   T43] usb 2-1: config 0 has no interface number 0
[  187.584125][   T43] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  187.595018][   T43] usb 2-1: config 0 interface 1 has no altsetting 0
[  187.604119][   T43] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  187.613851][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.622058][   T43] usb 2-1: Product: syz
[  187.626277][   T43] usb 2-1: Manufacturer: syz
[  187.631501][   T43] usb 2-1: SerialNumber: syz
[  187.638963][   T43] usb 2-1: config 0 descriptor??
[  187.689442][ T5958] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  187.840904][ T5958] usb 1-1: Using ep0 maxpacket: 16
[  187.853734][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.863760][ T5958] usb 1-1: no configurations
[  187.868501][ T5958] usb 1-1: can't read configurations, error -22
[  187.877575][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.973409][   T43] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  187.998258][   T43] cx231xx 2-1:0.1: Failed to read PCB config
[  188.011159][ T5958] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  188.025413][   T43] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71
[  188.044242][   T43] usb 2-1: USB disconnect, device number 58
[  188.182783][ T5958] usb 1-1: Using ep0 maxpacket: 16
[  188.188817][ T5958] usb 1-1: no configurations
[  188.195240][ T5957] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  188.204549][ T5958] usb 1-1: can't read configurations, error -22
[  188.212182][ T5958] usb usb1-port1: attempt power cycle
[  188.361757][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.371847][ T5957] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  188.381371][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.392932][ T5957] usb 4-1: config 0 descriptor??
[  188.409433][  T981] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  188.539355][  T981] usb 3-1: device descriptor read/64, error -71
[  188.553101][ T5958] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  188.580250][ T5958] usb 1-1: Using ep0 maxpacket: 16
[  188.586751][ T5958] usb 1-1: no configurations
[  188.592602][ T5958] usb 1-1: can't read configurations, error -22
[  188.669244][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  188.729520][ T5958] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  188.750493][ T5958] usb 1-1: Using ep0 maxpacket: 16
[  188.756469][ T5958] usb 1-1: no configurations
[  188.761315][ T5958] usb 1-1: can't read configurations, error -22
[  188.768077][ T5958] usb usb1-port1: unable to enumerate USB device
[  188.779617][  T981] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  188.919456][  T981] usb 3-1: device descriptor read/64, error -71
[  188.939406][ T5947] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  189.029751][  T981] usb usb3-port1: attempt power cycle
[  189.099408][ T5947] usb 2-1: Using ep0 maxpacket: 8
[  189.107158][ T5947] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  189.115496][ T5947] usb 2-1: config 0 has no interface number 0
[  189.122669][ T5947] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  189.133910][ T5947] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  189.143401][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.154330][ T5947] usb 2-1: config 0 descriptor??
[  189.168972][ T5947] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  189.372827][  T981] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  189.394239][ T5947] usb 2-1: USB disconnect, device number 59
[  189.407920][  T981] usb 3-1: device descriptor read/8, error -71
[  189.651678][  T981] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  189.680526][  T981] usb 3-1: device descriptor read/8, error -71
[  189.791944][  T981] usb usb3-port1: unable to enumerate USB device
[  190.419462][ T5958] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  190.579796][ T5958] usb 2-1: Using ep0 maxpacket: 32
[  190.587733][ T5958] usb 2-1: no configurations
[  190.591758][ T7448] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  190.595178][ T5958] usb 2-1: can't read configurations, error -22
[  190.749426][ T5958] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  190.909421][  T981] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  190.929468][ T5958] usb 2-1: Using ep0 maxpacket: 32
[  190.936893][ T5958] usb 2-1: no configurations
[  190.946417][ T5958] usb 2-1: can't read configurations, error -22
[  190.958119][ T5957] usbhid 4-1:0.0: can't add hid device: -71
[  190.976694][ T5958] usb usb2-port1: attempt power cycle
[  190.982429][ T5957] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  190.999568][ T5957] usb 4-1: USB disconnect, device number 56
[  191.070221][  T981] usb 1-1: Using ep0 maxpacket: 16
[  191.081533][  T981] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa
[  191.090997][  T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.099026][  T981] usb 1-1: Product: syz
[  191.103914][  T981] usb 1-1: Manufacturer: syz
[  191.108546][  T981] usb 1-1: SerialNumber: syz
[  191.115838][  T981] usb 1-1: config 0 descriptor??
[  191.329421][ T5958] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  191.335901][  T981] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  191.341817][ T5957] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  191.349846][  T981] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  191.355093][ T5958] usb 2-1: Using ep0 maxpacket: 32
[  191.368283][ T5958] usb 2-1: no configurations
[  191.374755][ T5958] usb 2-1: can't read configurations, error -22
[  191.381155][  T981] usb 1-1: USB disconnect, device number 53
[  191.509423][ T5957] usb 4-1: Using ep0 maxpacket: 16
[  191.514712][ T5958] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  191.524848][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.539243][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.549051][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  191.562969][ T5957] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  191.572434][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.581669][ T5958] usb 2-1: Using ep0 maxpacket: 32
[  191.588490][ T5958] usb 2-1: no configurations
[  191.589411][ T5947] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  191.594656][ T5958] usb 2-1: can't read configurations, error -22
[  191.608073][ T5957] usb 4-1: config 0 descriptor??
[  191.614599][ T5958] usb usb2-port1: unable to enumerate USB device
[  191.751469][ T5947] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  191.760414][ T5947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.770815][ T5947] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  191.780052][ T5947] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.793076][ T5947] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  191.802306][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  191.810759][ T5947] usb 3-1: Product: syz
[  191.815159][ T5947] usb 3-1: Manufacturer: syz
[  191.833772][ T5947] cdc_wdm 3-1:1.0: skipping garbage
[  191.839098][ T5947] cdc_wdm 3-1:1.0: skipping garbage
[  191.844871][ T5947] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  192.046183][  T981] usb 3-1: USB disconnect, device number 58
[  192.063795][ T7461] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  192.078855][ T7461] exFAT-fs (nullb0): invalid boot record signature
[  192.085948][ T7461] exFAT-fs (nullb0): failed to read boot sector
[  192.094832][ T7461] exFAT-fs (nullb0): failed to recognize exfat type
[  192.103106][ T5957] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max
[  192.115247][ T5957] microsoft 0003:045E:07DA.0010: unsupported Resolution Multiplier 0
[  192.126038][ T5957] microsoft 0003:045E:07DA.0010: implement() called with n (152) > 32! (kworker/1:6)
[  192.313729][ T5957] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  192.326988][ T5957] microsoft 0003:045E:07DA.0010: no inputs found
[  192.337914][ T5957] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway
[  192.355904][ T5957] usb 4-1: USB disconnect, device number 57
[  192.387917][ T7467] fido_id[7467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  192.529406][  T981] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  192.689350][  T981] usb 1-1: Using ep0 maxpacket: 32
[  192.696463][  T981] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  192.708504][  T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  192.722594][  T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  192.734688][  T981] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  192.744007][  T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.756206][  T981] usb 1-1: config 0 descriptor??
[  192.762363][ T7466] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  192.774766][  T981] hub 1-1:0.0: USB hub found
[  192.981167][  T981] hub 1-1:0.0: 8 ports detected
[  192.996795][  T981] hub 1-1:0.0: insufficient power available to use all downstream ports
[  193.056162][ T7479] No control pipe specified
[  193.185612][  T981] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  193.194961][   T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  193.209421][  T981] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  193.228460][  T981] usbhid 1-1:0.0: can't add hid device: -71
[  193.236340][  T981] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  193.271270][  T981] usb 1-1: USB disconnect, device number 54
[  193.359483][    T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  193.372527][   T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  193.386258][   T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  193.397745][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  193.411284][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  193.424375][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  193.437495][   T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  193.447625][   T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  193.455993][   T10] usb 4-1: Product: syz
[  193.461140][   T10] usb 4-1: Manufacturer: syz
[  193.473116][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  193.478407][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  193.494147][   T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  193.502882][   T10] cdc_wdm 4-1:1.0: Unknown control protocol
[  193.525465][    T9] usb 2-1: Using ep0 maxpacket: 16
[  193.542675][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.562433][    T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  193.580669][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.600091][    T9] usb 2-1: config 0 descriptor??
[  193.922992][ T7507] hugetlbfs: Bad value '���' for mount option 'size'
[  193.922992][ T7507] 
[  193.944742][ T7500] Invalid source name
[  193.962471][    C1] cdc_wdm 4-1:1.0: Unexpected error -71
[  193.962970][   T10] usb 4-1: USB disconnect, device number 58
[  193.970296][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  193.981353][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  193.987479][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  194.038811][    T9] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  194.189329][ T5958] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  194.372593][ T5958] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  194.384880][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.414965][ T5958] usb 1-1: config 0 descriptor??
[  194.420487][ T5957] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  194.429832][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.458043][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.473397][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.482771][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.569681][ T5957] usb 4-1: device descriptor read/64, error -71
[  194.579152][    T9] usb 2-1: USB disconnect, device number 64
[  194.683329][ T7524] No control pipe specified
[  194.833353][ T5957] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  194.865349][ T5958] ath6kl: Failed to submit usb control message: -71
[  194.885218][ T5958] ath6kl: unable to send the bmi data to the device: -71
[  194.904213][ T5958] ath6kl: Unable to send get target info: -71
[  194.924372][ T5958] ath6kl: Failed to init ath6kl core: -71
[  194.935742][ T5958] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  194.968643][ T5958] usb 1-1: USB disconnect, device number 55
[  194.979417][ T5957] usb 4-1: device descriptor read/64, error -71
[  195.099649][ T5957] usb usb4-port1: attempt power cycle
[  195.451128][ T5957] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  195.493541][ T5957] usb 4-1: device descriptor read/8, error -71
[  195.759966][ T5957] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  195.771984][ T7544] netlink: 830 bytes leftover after parsing attributes in process `syz.0.464'.
[  195.810207][ T5957] usb 4-1: device descriptor read/8, error -71
[  195.904143][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'.
[  195.920307][ T5957] usb usb4-port1: unable to enumerate USB device
[  196.473797][ T7582] netlink: 9 bytes leftover after parsing attributes in process `syz.0.477'.
[  196.483951][ T7582] 0�: renamed from hsr0 (while UP)
[  196.497710][ T7582] 0�: entered allmulticast mode
[  196.504095][ T7582] hsr_slave_0: entered allmulticast mode
[  196.510377][ T7582] hsr_slave_1: entered allmulticast mode
[  196.516468][ T7582] A link change request failed with some changes committed already. Interface 
70� may have been left with an inconsistent configuration, please check.
[  196.549928][   T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  196.612377][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.478'.
[  196.621648][ T5957] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  196.716820][   T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  196.726302][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.734874][   T10] usb 4-1: Product: syz
[  196.739159][   T10] usb 4-1: Manufacturer: syz
[  196.744146][   T10] usb 4-1: SerialNumber: syz
[  196.765755][   T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  196.784596][ T5957] usb 3-1: config 0 has an invalid interface number: 37 but max is 1
[  196.794864][ T5911] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  196.795134][ T5957] usb 3-1: config 0 has no interface number 1
[  196.833038][ T5957] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3
[  196.849319][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  196.857717][ T5957] usb 3-1: Product: syz
[  196.862392][ T5957] usb 3-1: Manufacturer: syz
[  196.867031][ T5957] usb 3-1: SerialNumber: syz
[  196.876901][ T5957] usb 3-1: config 0 descriptor??
[  197.098776][ T5957] usb 3-1: Could not set interface, error -71
[  197.123310][ T5957] usb 3-1: USB disconnect, device number 59
[  197.425158][ T7574] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  197.466077][    T9] usb 4-1: USB disconnect, device number 63
[  197.657685][ T7600] netlink: 92 bytes leftover after parsing attributes in process `syz.1.482'.
[  197.775558][ T7605] 9pnet_fd: Insufficient options for proto=fd
[  197.782481][ T7604] 9pnet_fd: Insufficient options for proto=fd
[  198.035228][ T7613] tmpfs: Cannot change global quota limit on remount
[  198.095900][ T5911] usb 4-1: Service connection timeout for: 256
[  198.110567][ T5911] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  198.120901][ T5911] ath9k_htc: Failed to initialize the device
[  198.127335][    T9] usb 4-1: ath9k_htc: USB layer deinitialized
[  199.291702][    T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  199.472270][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  199.485354][    T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  199.495166][    T9] usb 3-1: config 1 has no interface number 1
[  199.508311][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  199.518001][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.529890][    T9] usb 3-1: Product: syz
[  199.534107][    T9] usb 3-1: Manufacturer: syz
[  199.540145][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  199.546498][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  199.553038][ T5918] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  199.556359][    T9] usb 3-1: SerialNumber: syz
[  199.639313][ T5957] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  199.657465][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'.
[  199.734237][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  199.746244][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64
[  199.757717][ T5918] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  199.768619][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.785259][ T5918] usb 1-1: config 0 descriptor??
[  199.798529][    T9] usb 3-1: 2:1 : unknown format tag 0x1000 is detected.  processed as MPEG.
[  199.802632][ T5957] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  199.821392][ T7636] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  199.827410][ T5957] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  199.848420][ T5957] usb 4-1: config 0 interface 0 has no altsetting 0
[  199.850112][    T9] usb 3-1: found format II with max.bitrate = 26774, frame size=0
[  199.868223][    T9] usb 3-1: 2:1 : unknown format tag 0x1000 is detected.  processed as MPEG.
[  199.872184][ T5957] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  199.886660][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  199.897032][ T5957] usb 4-1: Product: syz
[  199.901368][ T5957] usb 4-1: Manufacturer: syz
[  199.905481][    T9] usb 3-1: found format II with max.bitrate = 26774, frame size=0
[  199.906021][ T5957] usb 4-1: SerialNumber: syz
[  199.919495][ T5911] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  199.932110][ T5957] usb 4-1: config 0 descriptor??
[  199.946662][ T5957] hub 4-1:0.0: bad descriptor, ignoring hub
[  199.952844][ T5957] hub 4-1:0.0: probe with driver hub failed with error -5
[  199.992011][ T5957] usb 4-1: selecting invalid altsetting 0
[  200.002111][    T9] usb 3-1: USB disconnect, device number 60
[  200.050200][ T5918] ath6kl: Failed to submit usb control message: -71
[  200.063099][ T5918] ath6kl: unable to send the bmi data to the device: -71
[  200.071797][ T5918] ath6kl: Unable to send get target info: -71
[  200.097153][ T5918] ath6kl: Failed to init ath6kl core: -71
[  200.112336][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  200.133127][ T5918] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  200.160944][ T5957] usb 4-1: USB disconnect, device number 64
[  200.172391][ T5911] usb 2-1: config 2 has an invalid interface number: 235 but max is 0
[  200.187035][ T5911] usb 2-1: config 2 has no interface number 0
[  200.194449][ T5911] usb 2-1: config 2 interface 235 altsetting 117 bulk endpoint 0x2 has invalid maxpacket 1023
[  200.211104][ T5911] usb 2-1: config 2 interface 235 altsetting 117 has an endpoint descriptor with address 0xE2, changing to 0x82
[  200.224955][ T5918] usb 1-1: USB disconnect, device number 56
[  200.229538][ T5911] usb 2-1: config 2 interface 235 altsetting 117 endpoint 0x82 has an invalid bInterval 20, changing to 8
[  200.248972][ T5911] usb 2-1: config 2 interface 235 altsetting 117 endpoint 0x82 has invalid maxpacket 33260, setting to 1024
[  200.264634][ T5911] usb 2-1: config 2 interface 235 altsetting 117 has an invalid descriptor for endpoint zero, skipping
[  200.278181][ T5911] usb 2-1: config 2 interface 235 altsetting 117 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  200.292664][ T5911] usb 2-1: config 2 interface 235 has no altsetting 0
[  200.346742][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=90.17
[  200.360082][ T7139] udevd[7139]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  200.387663][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.399519][ T5911] usb 2-1: Product: syz
[  200.403763][ T5911] usb 2-1: Manufacturer: syz
[  200.413419][ T5911] usb 2-1: SerialNumber: syz
[  200.436730][ T7624] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  200.521584][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.596725][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.671411][ T7650] comedi comedi4: bad chanlist[0]=0x00000101 chan=257 range length=2
[  200.839711][ T5957] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  200.846936][ T5911] usb 2-1: USB disconnect, device number 65
[  200.968612][ T7655] netlink: 'syz.0.496': attribute type 1 has an invalid length.
[  200.999592][ T7648] nbd0: detected capacity change from 0 to 127
[  201.047745][ T5181] block nbd0: Receive control failed (result -104)
[  201.048746][   T52] block nbd0: Receive control failed (result -32)
[  201.157679][ T7660] netlink: 'syz.3.497': attribute type 4 has an invalid length.
[  201.239014][ T7662] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.256660][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'.
[  201.280537][ T7660] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.497'.
[  201.299531][ T7660] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.497'.
[  201.739011][ T7677] affs: No valid root block on device nullb0
[  201.885594][ T7687] netlink: 'syz.3.507': attribute type 10 has an invalid length.
[  201.990910][ T7687] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  202.269468][ T5918] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  202.424912][ T5918] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.436145][ T5918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  202.448992][ T5918] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  202.452898][ T5947] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  202.458364][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  202.474557][ T5918] usb 3-1: SerialNumber: syz
[  202.639596][ T5911] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  202.647764][ T5947] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  202.657125][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.672693][ T5947] usb 4-1: config 0 descriptor??
[  202.684384][ T7715] 9pnet_fd: p9_fd_create_tcp (7715): problem connecting socket to 127.0.0.1
[  202.686288][ T5947] gspca_main: sunplus-2.14.0 probing 055f:c420
[  202.704332][ T7715] netlink: 188 bytes leftover after parsing attributes in process `syz.1.515'.
[  202.707326][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.730962][ T7715] netlink: 'syz.1.515': attribute type 7 has an invalid length.
[  202.741467][ T7715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.515'.
[  202.743949][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.768417][ T7692] binder: 7691:7692 ioctl c0306201 200000000080 returned -14
[  202.799017][ T5918] usb 3-1: 0:2 : does not exist
[  202.807123][ T5918] usb 3-1: unit 5: unexpected type 0x03
[  202.812063][ T5911] usb 1-1: unable to get BOS descriptor set
[  202.820724][ T5911] usb 1-1: not running at top speed; connect to a high speed hub
[  202.834524][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.843187][ T5918] usb 3-1: USB disconnect, device number 61
[  202.850646][ T5911] usb 1-1: config 0 has no interfaces?
[  202.854144][ T5911] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  202.881523][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.890309][ T5947] gspca_sunplus: reg_w_riv err -71
[  202.901727][ T5947] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  202.916163][ T5911] usb 1-1: Product: syz
[  202.925306][ T5911] usb 1-1: Manufacturer: syz
[  202.933043][ T5947] usb 4-1: USB disconnect, device number 66
[  202.939554][ T5911] usb 1-1: SerialNumber: syz
[  202.967259][ T5911] usb 1-1: config 0 descriptor??
[  203.181280][ T5918] usb 1-1: USB disconnect, device number 57
[  204.019609][ T5918] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  204.182605][ T5918] usb 1-1: config index 0 descriptor too short (expected 65183, got 72)
[  204.193221][ T5918] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  204.202537][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.210818][ T5918] usb 1-1: Product: syz
[  204.215035][ T5918] usb 1-1: Manufacturer: syz
[  204.219733][ T5918] usb 1-1: SerialNumber: syz
[  204.229473][ T5947] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  204.235058][ T5918] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  204.255195][ T5957] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  204.300350][  T122] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  204.392146][ T5947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.402606][ T5947] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  204.417763][ T5947] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  204.427341][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.435745][ T5947] usb 3-1: Product: syz
[  204.440371][ T5947] usb 3-1: Manufacturer: syz
[  204.445016][ T5947] usb 3-1: SerialNumber: syz
[  204.455220][ T7745] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  204.470494][  T122] usb 2-1: Using ep0 maxpacket: 16
[  204.473243][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.486716][  T122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.487308][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.507353][  T122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.518485][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.531603][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.532036][  T122] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  204.544700][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.557809][  T122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.560292][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.578890][    T9] usb 1-1: USB disconnect, device number 58
[  204.589434][ T5918] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  204.602514][  T122] usb 2-1: config 0 descriptor??
[  204.759385][ T5918] usb 4-1: Using ep0 maxpacket: 8
[  204.767460][ T5918] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  204.778242][ T5918] usb 4-1: config 127 has 1 interface, different from the descriptor's value: 2
[  204.791468][ T5918] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  204.801310][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.810171][ T5918] usb 4-1: Product: syz
[  204.814799][ T5918] usb 4-1: Manufacturer: syz
[  204.819876][ T5918] usb 4-1: SerialNumber: syz
[  204.889714][ T5947] cdc_ncm 3-1:1.0: bind() failure
[  204.910415][ T5947] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  204.917298][ T5947] cdc_ncm 3-1:1.1: bind() failure
[  204.936149][ T5947] usb 3-1: USB disconnect, device number 62
[  205.035193][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.044706][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.068209][  T122] saitek 0003:06A3:0621.0012: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0
[  205.082207][ T5918] xr_serial 4-1:127.0: failed to claim sibling interface: -16
[  205.094807][ T5918] xr_serial 4-1:127.0: probe with driver xr_serial failed with error -16
[  205.110359][ T5918] usb 4-1: USB disconnect, device number 67
[  205.249425][  T122] usb 2-1: USB disconnect, device number 66
[  205.290343][ T5947] usb 3-1: new low-speed USB device number 63 using dummy_hcd
[  205.296733][ T5957] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  205.306934][ T5957] ath9k_htc: Failed to initialize the device
[  205.315916][    T9] usb 1-1: ath9k_htc: USB layer deinitialized
[  205.452559][ T5947] usb 3-1: config index 0 descriptor too short (expected 138, got 36)
[  205.461020][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.471500][ T5947] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  205.482014][ T5947] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.494898][ T5947] usb 3-1: config 0 interface 0 has no altsetting 0
[  205.609416][    T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  205.653920][ T7759] netlink: 'syz.3.530': attribute type 6 has an invalid length.
[  205.665230][ T7759] netlink: 'syz.3.530': attribute type 11 has an invalid length.
[  205.779994][    T9] usb 1-1: Using ep0 maxpacket: 32
[  205.792416][    T9] usb 1-1: config index 0 descriptor too short (expected 241, got 72)
[  205.807268][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  205.820767][    T9] usb 1-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da
[  205.831125][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.833736][ T7766] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  205.850525][    T9] usb 1-1: config 0 descriptor??
[  205.874597][ T7766] CIFS mount error: No usable UNC path provided in device string!
[  205.874597][ T7766] 
[  205.887588][    T9] mos7840 1-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected
[  205.913486][ T7766] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  205.928870][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.532'.
[  206.179358][ T5911] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  206.213256][ T7777] netlink: 'syz.1.536': attribute type 10 has an invalid length.
[  206.235703][ T7777] team0: Port device dummy0 added
[  206.345658][ T5911] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  206.356651][ T5911] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  206.372375][ T5911] usb 4-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  206.387799][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  206.409045][ T7779] netlink: 'syz.1.536': attribute type 10 has an invalid length.
[  206.419372][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  206.433964][ T5911] usb 4-1: SerialNumber: syz
[  206.473382][ T7779] team0: Port device dummy0 removed
[  206.487296][ T7779] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  206.678366][ T5911] usb 4-1: bad CDC descriptors
[  206.690343][ T5911] usb 4-1: USB disconnect, device number 68
[  206.819739][  T122] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  206.970299][  T122] usb 2-1: Using ep0 maxpacket: 8
[  206.977777][  T122] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  206.990734][  T122] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  207.001371][  T122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.009791][  T122] usb 2-1: Product: syz
[  207.014098][  T122] usb 2-1: Manufacturer: syz
[  207.018722][  T122] usb 2-1: SerialNumber: syz
[  207.026788][  T122] usb 2-1: config 0 descriptor??
[  207.036445][  T122] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  207.045588][  T122] usb 2-1: setting power ON
[  207.050790][  T122] dvb-usb: bulk message failed: -22 (2/0)
[  207.060775][  T122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  207.072362][  T122] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  207.081575][  T122] usb 2-1: media controller created
[  207.105548][ T7740] loop3: detected capacity change from 0 to 1
[  207.107413][  T122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  207.125603][ T7740] Dev loop3: unable to read RDB block 1
[  207.138991][ T7740]  loop3: AHDI p1
[  207.144685][ T7740] loop3: partition table partially beyond EOD, truncated
[  207.148185][  T122] usb 2-1: selecting invalid altsetting 6
[  207.158639][  T122] usb 2-1: digital interface selection failed (-22)
[  207.165663][  T122] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  207.168498][    T9] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[  207.180283][  T122] usb 2-1: setting power OFF
[  207.199579][    T9] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71
[  207.213199][  T122] dvb-usb: bulk message failed: -22 (2/0)
[  207.229635][  T122] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  207.239088][  T122] (NULL device *): no alternate interface
[  207.271187][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.292615][    T9] usb 1-1: USB disconnect, device number 59
[  207.309138][    T9] mos7840 1-1:0.0: device disconnected
[  207.315935][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.348732][  T122] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  207.378573][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.392336][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.428014][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.450808][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.592712][ T5957] usb 2-1: USB disconnect, device number 67
[  207.671152][ T7788] vxcan1 speed is unknown, defaulting to 1000
[  207.674949][ T7790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.683846][ T7788] vxcan1 speed is unknown, defaulting to 1000
[  207.702779][ T7788] vxcan1 speed is unknown, defaulting to 1000
[  208.009129][ T5957] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  208.014565][   T10] vxcan1 speed is unknown, defaulting to 1000
[  208.026245][ T7788] infiniband syz2: set active
[  208.032146][ T7788] infiniband syz2: added vxcan1
[  208.041024][ T5947] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  208.054982][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.085524][ T5947] usb 3-1: config 0 descriptor??
[  208.100309][ T5947] usb 3-1: can't set config #0, error -71
[  208.121657][ T5947] usb 3-1: USB disconnect, device number 63
[  208.184994][ T5957] usb 2-1: unable to get BOS descriptor or descriptor too short
[  208.201224][ T5957] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  208.216941][ T7788] RDS/IB: syz2: added
[  208.227278][ T7788] smc: adding ib device syz2 with port count 1
[  208.234407][ T7788] smc:    ib device syz2 port 1 has no pnetid
[  208.243601][   T10] vxcan1 speed is unknown, defaulting to 1000
[  208.255642][ T7788] vxcan1 speed is unknown, defaulting to 1000
[  208.293402][ T5957] usb 2-1: New USB device found, idVendor=046d, idProduct=0057, bcdDevice= 0.40
[  208.309025][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.309054][ T5957] usb 2-1: Product: syz
[  208.309071][ T5957] usb 2-1: SerialNumber: syz
[  208.319704][ T5958] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  208.505979][ T5958] usb 1-1: config 5 has an invalid interface number: 233 but max is 1
[  208.515209][ T5958] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  208.529392][ T5958] usb 1-1: config 5 has no interface number 1
[  208.535705][ T5958] usb 1-1: config 5 interface 233 has no altsetting 0
[  208.553603][ T5957] usbhid 2-1:1.0: can't add hid device: -71
[  208.563621][ T5957] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  208.576902][ T5958] usb 1-1: string descriptor 0 read error: -71
[  208.586004][ T5958] usb 1-1: New USB device found, idVendor=1e2d, idProduct=0085, bcdDevice=96.e8
[  208.602315][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.612850][ T5957] usb 2-1: USB disconnect, device number 68
[  208.623172][ T5947] usb 3-1: new low-speed USB device number 64 using dummy_hcd
[  208.638612][ T7788] vxcan1 speed is unknown, defaulting to 1000
[  208.650036][ T5958] usb 1-1: can't set config #5, error -71
[  208.664524][ T5958] usb 1-1: USB disconnect, device number 60
[  208.791792][ T5947] usb 3-1: config 0 has an invalid interface number: 194 but max is 3
[  208.805556][ T5947] usb 3-1: config 0 has an invalid interface number: 214 but max is 3
[  208.815155][ T5947] usb 3-1: config 0 has an invalid interface number: 125 but max is 3
[  208.824119][ T5947] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  208.834875][ T5947] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 4
[  208.844751][ T5947] usb 3-1: config 0 has no interface number 0
[  208.851344][ T5947] usb 3-1: config 0 has no interface number 1
[  208.858211][ T5947] usb 3-1: config 0 has no interface number 2
[  208.864999][ T5947] usb 3-1: config 0 interface 214 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  208.876720][ T5947] usb 3-1: config 0 interface 214 altsetting 255 endpoint 0x5 is Bulk; changing to Interrupt
[  208.888347][ T5947] usb 3-1: config 0 interface 214 altsetting 255 endpoint 0xF has invalid maxpacket 1023, setting to 8
[  208.905415][ T5947] usb 3-1: config 0 interface 125 altsetting 16 endpoint 0x2 has invalid maxpacket 32, setting to 8
[  208.910487][ T7788] vxcan1 speed is unknown, defaulting to 1000
[  208.923733][ T5947] usb 3-1: config 0 interface 125 altsetting 16 has a duplicate endpoint with address 0x2, skipping
[  208.938567][ T5947] usb 3-1: config 0 interface 125 altsetting 16 has a duplicate endpoint with address 0x2, skipping
[  208.953326][ T5947] usb 3-1: config 0 interface 125 altsetting 16 endpoint 0x9 has invalid maxpacket 64, setting to 8
[  208.964820][ T5947] usb 3-1: config 0 interface 125 altsetting 16 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  208.981940][ T5947] usb 3-1: config 0 interface 194 has no altsetting 0
[  208.992365][ T5947] usb 3-1: config 0 interface 214 has no altsetting 0
[  209.001393][ T5947] usb 3-1: config 0 interface 125 has no altsetting 0
[  209.013813][ T5947] usb 3-1: New USB device found, idVendor=06cd, idProduct=0105, bcdDevice=90.0f
[  209.027248][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.036570][ T5947] usb 3-1: Product: ࠾
[  209.044588][ T5947] usb 3-1: Manufacturer: 㐊
[  209.049567][ T5947] usb 3-1: SerialNumber: 쐴篢濛䷢품ꉥ㊱鼩꓀ϝ燾걝ᱡ薚न씓힩䎑Ϋ셺꾞ᗍ᱓㪐ኣ譣郻븐ⷧ탘넑ⲥ袦韗蘊녀寜뵊ꗗ牕⇴
[  209.088362][ T5947] usb 3-1: config 0 descriptor??
[  209.263258][ T7788] vxcan1 speed is unknown, defaulting to 1000
[  209.299580][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.318701][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.343389][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.343937][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.345805][ T7813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.346356][ T7813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.394012][    T9] usb 2-1: new full-speed USB device number 69 using dummy_hcd
[  209.482193][ T5947] keyspan 3-1:0.194: Keyspan - (without firmware) converter detected
[  209.515491][ T5947] usb 3-1: Direct firmware load for keyspan/usa18x.fw failed with error -2
[  209.525229][ T5947] usb 3-1: Falling back to sysfs fallback for: keyspan/usa18x.fw
[  209.565942][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  209.580886][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.589151][    T9] usb 2-1: Product: syz
[  209.595578][    T9] usb 2-1: Manufacturer: syz
[  209.603580][    T9] usb 2-1: SerialNumber: syz
[  209.614031][    T9] usb 2-1: config 0 descriptor??
[  209.781777][ T5957] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  209.836851][    T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  209.951848][ T5957] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  209.963574][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  209.994939][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  210.005701][ T5957] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  210.032637][ T5957] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  210.057957][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.082655][ T5957] usb 1-1: config 0 descriptor??
[  210.110670][ T5958] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  210.123931][ T7823] loop6: detected capacity change from 0 to 63
[  210.133866][ T6341] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.145959][ T6341] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.156979][ T6341] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.168477][ T6341] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.183234][ T6341] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.192708][ T6341] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.207163][ T6341] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.217001][ T6341] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.231713][ T6341] ldm_validate_partition_table(): Disk read failed.
[  210.238472][ T6341] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.252247][ T6341] Buffer I/O error on dev loop6, logical block 0, async page read
[  210.273769][ T6341] Dev loop6: unable to read RDB block 0
[  210.280604][ T6341]  loop6: unable to read partition table
[  210.289418][ T5958] usb 4-1: Using ep0 maxpacket: 32
[  210.301295][ T7823] ldm_validate_partition_table(): Disk read failed.
[  210.304430][ T5958] usb 4-1: unable to get BOS descriptor or descriptor too short
[  210.316837][ T7823] Dev loop6: unable to read RDB block 0
[  210.329780][ T7823]  loop6: unable to read partition table
[  210.347288][ T5958] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  210.366692][ T7823] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  210.376936][ T5958] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  210.391115][ T5958] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  210.402980][ T5958] usb 4-1: config 128 has no interface number 0
[  210.412075][ T5958] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 194, changing to 11
[  210.426056][ T5958] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33851, setting to 1024
[  210.438429][ T5958] usb 4-1: config 128 interface 127 has no altsetting 0
[  210.450601][ T5958] usb 4-1: string descriptor 0 read error: -22
[  210.456992][ T5958] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  210.467071][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.479989][ T7821] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  210.704018][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.713276][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.727867][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'.
[  210.740245][ T5958] usb 4-1: USB disconnect, device number 69
[  210.846827][ T7807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.855908][ T7807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.965674][    T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  210.983331][    T9] usb 2-1: USB disconnect, device number 69
[  211.819530][ T7848] random: crng reseeded on system resumption
[  211.979385][ T5958] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  212.109489][ T5958] usb 4-1: device descriptor read/64, error -71
[  212.349441][ T5958] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  212.499495][ T5958] usb 4-1: device descriptor read/64, error -71
[  212.577082][ T5957] usbhid 1-1:0.0: can't add hid device: -71
[  212.591421][ T5957] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  212.605699][ T5957] usb 1-1: USB disconnect, device number 61
[  212.612623][ T5958] usb usb4-port1: attempt power cycle
[  212.969491][ T5958] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  212.991142][ T5958] usb 4-1: device descriptor read/8, error -71
[  213.080129][ T5957] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  213.195817][ T7861] vxcan1 speed is unknown, defaulting to 1000
[  213.218026][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.229369][ T5958] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  213.234096][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.244752][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.257431][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.268377][ T5957] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  213.278108][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.287980][ T5958] usb 4-1: device descriptor read/8, error -71
[  213.302746][ T5957] usb 1-1: config 0 descriptor??
[  213.410083][ T5958] usb usb4-port1: unable to enumerate USB device
[  213.829840][ T7865] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.563'.
[  213.857375][ T5957] hid_parser_main: 146 callbacks suppressed
[  213.857402][ T5957] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  213.879140][ T5957] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  213.886306][ T5957] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  213.896686][ T5957] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  213.908664][ T5957] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  213.919076][ T5957] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  213.927631][ T5957] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0
[  213.955650][ T5957] arvo 0003:1E7D:30D4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0
[  215.162377][ T5911] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  215.321457][ T5911] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  215.329903][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.341080][ T5911] usb 4-1: config 0 has no interface number 0
[  215.347271][ T5911] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  215.357323][ T5911] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.372970][ T5911] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  215.382223][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.390410][ T5911] usb 4-1: Product: syz
[  215.394613][ T5911] usb 4-1: Manufacturer: syz
[  215.399297][ T5911] usb 4-1: SerialNumber: syz
[  215.406878][ T5911] usb 4-1: config 0 descriptor??
[  215.785826][ T5957] arvo 0003:1E7D:30D4.0013: couldn't init struct arvo_device
[  215.797269][ T5957] arvo 0003:1E7D:30D4.0013: couldn't install keyboard
[  215.808903][ T5957] arvo 0003:1E7D:30D4.0013: probe with driver arvo failed with error -71
[  215.835220][ T5957] usb 1-1: USB disconnect, device number 62
[  215.853066][ T5911] usb 4-1: USB disconnect, device number 74
[  216.419491][ T5911] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  216.595387][ T5911] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  216.610527][ T5911] usb 1-1: config 0 has no interface number 0
[  216.626990][ T5911] usb 1-1: config 0 interface 122 has no altsetting 0
[  216.645940][ T5911] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  216.665524][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.674218][ T5911] usb 1-1: Product: syz
[  216.682458][ T5911] usb 1-1: Manufacturer: syz
[  216.687303][ T5911] usb 1-1: SerialNumber: syz
[  216.701457][ T5911] usb 1-1: config 0 descriptor??
[  216.929433][   T43] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  217.099530][   T43] usb 4-1: Using ep0 maxpacket: 32
[  217.106669][   T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.116962][   T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.132039][ T5911] usb 1-1: USB disconnect, device number 63
[  217.144270][   T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  217.148908][ T5911] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  217.154927][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.171416][   T43] usb 4-1: Product: syz
[  217.176459][   T43] usb 4-1: Manufacturer: syz
[  217.181186][   T43] usb 4-1: SerialNumber: syz
[  217.864767][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'.
[  218.060267][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.080275][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.220070][ T7904] netlink: 'syz.0.577': attribute type 4 has an invalid length.
[  218.297618][   T43] cdc_ncm 4-1:1.0: bind() failure
[  218.309087][   T43] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  218.316244][   T43] cdc_ncm 4-1:1.1: bind() failure
[  218.469377][ T5957] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  218.599363][ T5957] usb 1-1: device descriptor read/64, error -71
[  218.849523][ T5957] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  218.979405][ T5957] usb 1-1: device descriptor read/64, error -71
[  219.091051][ T5957] usb usb1-port1: attempt power cycle
[  219.439339][ T5957] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  219.461815][ T5957] usb 1-1: device descriptor read/8, error -71
[  219.703181][   T43] usb 4-1: USB disconnect, device number 75
[  219.711403][ T5957] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  219.749957][ T5957] usb 1-1: device descriptor read/8, error -71
[  219.764456][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'.
[  219.879700][ T5957] usb usb1-port1: unable to enumerate USB device
[  219.894819][ T7916] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.581'.
[  219.908337][ T7916] bridge: RTM_NEWNEIGH with invalid state 0x1d25
[  219.918804][ T7917] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.581'.
[  219.929367][ T7917] bridge: RTM_NEWNEIGH with invalid state 0x1d25
[  220.279436][ T5911] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  220.429469][ T5911] usb 4-1: Using ep0 maxpacket: 16
[  220.437887][ T5911] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  220.446240][ T5911] usb 4-1: config 1 has no interface number 0
[  220.454366][ T5911] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  220.465616][ T5911] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  220.477894][ T5911] usb 4-1: config 1 interface 105 has no altsetting 0
[  220.487263][ T5911] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  220.496706][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.504880][ T5911] usb 4-1: Product: syz
[  220.509149][ T5911] usb 4-1: Manufacturer: syz
[  220.513957][ T5911] usb 4-1: SerialNumber: syz
[  220.522646][ T7923] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  220.530208][ T7923] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  220.741548][ T7923] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  220.749103][ T7923] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  220.943065][ T5911] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32
[  220.954666][ T5911] aqc111 4-1:1.105: probe with driver aqc111 failed with error -32
[  222.364945][ T7943] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.588'.
[  222.488129][ T7946] netlink: 'syz.0.589': attribute type 10 has an invalid length.
[  222.504943][ T7946] team0: Device ipvlan1 failed to register rx_handler
[  223.077784][   T43] usb 4-1: USB disconnect, device number 76
[  223.579421][   T43] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  223.733887][   T43] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  223.743056][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.754270][   T43] usb 4-1: config 0 descriptor??
[  223.762555][   T43] cp210x 4-1:0.0: cp210x converter detected
[  223.964096][   T43] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -121
[  224.179527][   T43] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -32
[  224.187506][   T43] cp210x 4-1:0.0: GPIO initialisation failed: -32
[  224.196866][   T43] usb 4-1: cp210x converter now attached to ttyUSB0
[  226.358919][   T43] usb 4-1: USB disconnect, device number 77
[  226.373356][   T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  226.389926][   T43] cp210x 4-1:0.0: device disconnected
[  226.515283][ T7969] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  226.525550][ T7969] overlayfs: missing 'lowerdir'
[  226.660082][ T7973] netlink: 'syz.3.598': attribute type 10 has an invalid length.
[  226.975645][ T7983] ieee802154 phy0 wpan0: encryption failed: -22
[  227.234885][ T5181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  227.252979][ T5181] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  227.267108][ T5181] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  227.276860][ T5181] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  227.286964][ T5181] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  227.365109][ T7990] vxcan1 speed is unknown, defaulting to 1000
[  227.786053][ T7990] chnl_net:caif_netlink_parms(): no params data found
[  227.850143][   T43] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  227.885632][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.893569][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.901430][ T7990] bridge_slave_0: entered allmulticast mode
[  227.908925][ T7990] bridge_slave_0: entered promiscuous mode
[  227.918772][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.926321][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.936662][ T7990] bridge_slave_1: entered allmulticast mode
[  227.944147][ T7990] bridge_slave_1: entered promiscuous mode
[  227.983465][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.995896][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.013234][   T43] usb 4-1: Using ep0 maxpacket: 32
[  228.033947][   T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  228.045752][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  228.057047][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  228.067225][   T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  228.074062][ T7990] team0: Port device team_slave_0 added
[  228.079679][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  228.096049][ T7990] team0: Port device team_slave_1 added
[  228.096901][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  228.119954][   T43] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  228.129841][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.138920][   T43] usb 4-1: Product: syz
[  228.144642][   T43] usb 4-1: Manufacturer: syz
[  228.149803][   T43] usb 4-1: SerialNumber: syz
[  228.157567][   T43] usb 4-1: config 0 descriptor??
[  228.167118][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.181297][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.210483][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.223197][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.231213][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.258196][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.308865][ T7990] hsr_slave_0: entered promiscuous mode
[  228.315863][ T7990] hsr_slave_1: entered promiscuous mode
[  228.323115][ T7990] debugfs: 'hsr0' already exists in 'hsr'
[  228.328897][ T7990] Cannot create hsr debugfs directory
[  228.392250][   T43] usb 4-1: USB disconnect, device number 78
[  228.687465][ T7990] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  228.706525][ T7990] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  228.722280][ T7990] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  228.743532][ T7990] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  228.915931][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.938966][ T7990] 8021q: adding VLAN 0 to HW filter on device team0
[  228.955023][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.962215][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.985520][ T4612] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.992802][ T4612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.222227][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.370235][ T5181] Bluetooth: hci4: command tx timeout
[  229.548316][ T7990] veth0_vlan: entered promiscuous mode
[  229.565026][ T7990] veth1_vlan: entered promiscuous mode
[  229.600460][ T7990] veth0_macvtap: entered promiscuous mode
[  229.612179][ T7990] veth1_macvtap: entered promiscuous mode
[  229.633358][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.650479][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.664958][ T1096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.676144][ T1096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.686911][ T1096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.697310][ T4612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.814813][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.837278][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.863028][ T8042] deleting an unspecified loop device is not supported.
[  229.884036][ T4612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.892895][ T4612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.179452][  T122] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  230.349346][  T122] usb 4-1: Using ep0 maxpacket: 32
[  230.365207][  T122] usb 4-1: config 0 has no interfaces?
[  230.378939][  T122] usb 4-1: New USB device found, idVendor=19d2, idProduct=0139, bcdDevice=93.8a
[  230.391233][  T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.402437][  T122] usb 4-1: Product: syz
[  230.406862][  T122] usb 4-1: Manufacturer: syz
[  230.414579][  T122] usb 4-1: SerialNumber: syz
[  230.430374][  T122] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  230.444638][  T122] usb 4-1: no configuration chosen from 1 choice
[  230.769501][  T981] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  230.919480][  T981] usb 5-1: Using ep0 maxpacket: 32
[  230.926712][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.938425][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.948451][  T981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.961565][  T981] usb 5-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.00
[  230.970802][  T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.985035][  T981] usb 5-1: config 0 descriptor??
[  231.226428][  T981] usb 5-1: string descriptor 0 read error: -71
[  231.237901][  T981] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22
[  231.251855][ T5216] bcm5974 5-1:0.0: could not read from device
[  231.263662][ T5216] bcm5974 5-1:0.0: could not read from device
[  231.316478][ T6341] udevd[6341]: Unable to EVIOCGABS device "/dev/input/event4"
[  231.322576][ T5216] bcm5974 5-1:0.0: could not read from device
[  231.326239][  T981] usb 5-1: USB disconnect, device number 2
[  231.340733][ T6341] udevd[6341]: Unable to EVIOCGABS device "/dev/input/event4"
[  231.349556][ T6341] udevd[6341]: Unable to EVIOCGABS device "/dev/input/event4"
[  231.357213][ T6341] udevd[6341]: Unable to EVIOCGABS device "/dev/input/event4"
[  231.449526][ T5181] Bluetooth: hci4: command tx timeout
[  231.534575][   T97] block nbd0: Connection timed out, retrying (0/2 alive)
[  231.543320][   T97] block nbd0: Connection timed out, retrying (0/2 alive)
[  231.551048][   T97] block nbd0: Connection timed out, retrying (0/2 alive)
[  231.558168][   T97] block nbd0: Connection timed out, retrying (0/2 alive)
[  231.567174][   T97] block nbd0: Dead connection, failed to find a fallback
[  231.576016][   T97] block nbd0: shutting down sockets
[  231.582154][   T97] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  231.592086][   T97] buffer_io_error: 29 callbacks suppressed
[  231.592106][   T97] Buffer I/O error on dev nbd0, logical block 3, async page read
[  231.606495][   T97] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  231.616252][   T97] Buffer I/O error on dev nbd0, logical block 2, async page read
[  231.624748][   T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  231.633931][   T97] Buffer I/O error on dev nbd0, logical block 1, async page read
[  231.641861][   T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  231.651070][   T97] Buffer I/O error on dev nbd0, logical block 0, async page read
[  231.661957][ T5866] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  231.674636][ T5866] Buffer I/O error on dev nbd0, logical block 0, async page read
[  231.683578][ T5866] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  231.693878][ T5866] Buffer I/O error on dev nbd0, logical block 1, async page read
[  231.702459][ T5866] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  231.711722][ T5866] Buffer I/O error on dev nbd0, logical block 2, async page read
[  231.720977][ T5866] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  231.730238][ T5866] Buffer I/O error on dev nbd0, logical block 3, async page read
[  231.738596][ T5866] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  231.747949][ T5866] Buffer I/O error on dev nbd0, logical block 0, async page read
[  231.756034][ T5866] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  231.766018][ T5866] Buffer I/O error on dev nbd0, logical block 1, async page read
[  231.777616][ T5866] ldm_validate_partition_table(): Disk read failed.
[  231.787984][ T5866] Dev nbd0: unable to read RDB block 0
[  231.796690][ T5866]  nbd0: unable to read partition table
[  231.811255][ T5866] ldm_validate_partition_table(): Disk read failed.
[  231.822281][ T5866] Dev nbd0: unable to read RDB block 0
[  231.830368][ T5866]  nbd0: unable to read partition table
[  232.197621][ T8066] netlink: 'syz.4.621': attribute type 1 has an invalid length.
[  232.208309][ T8066] netlink: 'syz.4.621': attribute type 101 has an invalid length.
[  232.216790][ T8066] netlink: 480 bytes leftover after parsing attributes in process `syz.4.621'.
[  232.329588][    T9] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  232.507621][    T9] usb 1-1: config 0 has an invalid interface number: 254 but max is 0
[  232.526572][    T9] usb 1-1: config 0 has no interface number 0
[  232.543135][    T9] usb 1-1: config 0 interface 254 has no altsetting 0
[  232.568725][    T9] usb 1-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=54.79
[  232.580508][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.603110][    T9] usb 1-1: Product: syz
[  232.607351][    T9] usb 1-1: Manufacturer: syz
[  232.633114][    T9] usb 1-1: SerialNumber: syz
[  232.660252][    T9] usb 1-1: config 0 descriptor??
[  232.870054][ T5911] usb 4-1: USB disconnect, device number 79
[  233.389643][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  233.570487][    T9] snd-usb-audio 1-1:0.254: probe with driver snd-usb-audio failed with error -2
[  233.607373][   T30] kauditd_printk_skb: 432 callbacks suppressed
[  233.607392][   T30] audit: type=1326 audit(1757884417.780:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c38eba9 code=0x7fc00000
[  233.609636][    T9] usb 1-1: USB disconnect, device number 68
[  233.753122][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.254/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  234.149307][  T981] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  234.251069][ T5181] Bluetooth: hci4: command tx timeout
[  234.324136][  T981] usb 5-1: config 1 has an invalid interface number: 132 but max is 0
[  234.349273][  T981] usb 5-1: config 1 has no interface number 0
[  234.355497][  T981] usb 5-1: config 1 interface 132 has no altsetting 0
[  234.390896][  T981] usb 5-1: New USB device found, idVendor=0c45, idProduct=6248, bcdDevice=3d.34
[  234.405538][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.419446][  T981] usb 5-1: Product: syz
[  234.423730][  T981] usb 5-1: Manufacturer: syz
[  234.428372][  T981] usb 5-1: SerialNumber: syz
[  234.679287][ T5957] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  234.699155][  T981] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6248
[  234.707334][  T981] gspca_sn9c20x: Write register 1000 failed -71
[  234.720521][  T981] gspca_sn9c20x: Device initialization failed
[  234.726822][  T981] gspca_sn9c20x 5-1:1.132: probe with driver gspca_sn9c20x failed with error -71
[  234.756362][  T981] usb 5-1: USB disconnect, device number 3
[  234.854696][ T5957] usb 4-1: Using ep0 maxpacket: 8
[  234.866083][ T5957] usb 4-1: unable to get BOS descriptor or descriptor too short
[  234.877230][ T5957] usb 4-1: config 82 has an invalid interface number: 96 but max is 0
[  234.896580][ T5957] usb 4-1: config 82 has no interface number 0
[  234.907238][ T5957] usb 4-1: config 82 interface 96 altsetting 225 has an endpoint descriptor with address 0x11, changing to 0x1
[  234.925768][ T5957] usb 4-1: config 82 interface 96 altsetting 225 endpoint 0x1 has invalid wMaxPacketSize 0
[  234.944486][ T5957] usb 4-1: config 82 interface 96 has no altsetting 0
[  234.955347][ T5957] usb 4-1: New USB device found, idVendor=16ab, idProduct=7802, bcdDevice=ce.24
[  234.974967][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.999244][ T5957] usb 4-1: Product: syz
[  235.003582][ T5957] usb 4-1: Manufacturer: syz
[  235.008253][ T5957] usb 4-1: SerialNumber: syz
[  235.234531][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.243734][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.281054][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'.
[  235.323910][ T5957] usb 4-1: Could not find all expected endpoints
[  235.354281][ T5957] usb 4-1: USB disconnect, device number 80
[  235.479538][ T8117] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  235.669361][  T981] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  235.799348][  T981] usb 1-1: device descriptor read/64, error -71
[  236.049317][  T981] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  236.189518][  T981] usb 1-1: device descriptor read/64, error -71
[  236.304588][  T981] usb usb1-port1: attempt power cycle
[  236.489477][   T43] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  236.649560][  T981] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  236.651093][   T43] usb 5-1: Invalid ep0 maxpacket: 64
[  236.680096][  T981] usb 1-1: device descriptor read/8, error -71
[  236.789558][   T43] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  236.929483][  T981] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  236.939828][   T43] usb 5-1: Invalid ep0 maxpacket: 64
[  236.948105][   T43] usb usb5-port1: attempt power cycle
[  236.960388][  T981] usb 1-1: device descriptor read/8, error -71
[  237.083428][  T981] usb usb1-port1: unable to enumerate USB device
[  237.310099][   T43] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  237.330115][   T43] usb 5-1: Invalid ep0 maxpacket: 64
[  237.459414][   T43] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  237.480055][   T43] usb 5-1: Invalid ep0 maxpacket: 64
[  237.485804][   T43] usb usb5-port1: unable to enumerate USB device
[  237.559391][  T122] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  237.709376][  T122] usb 4-1: Using ep0 maxpacket: 8
[  237.716645][  T122] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  237.727028][  T122] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9
[  237.738766][  T122] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 30064, setting to 1024
[  237.750092][  T122] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  237.761479][  T122] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  237.777410][  T122] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  237.786547][  T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.795070][  T122] usb 4-1: Product: syz
[  237.799400][  T122] usb 4-1: Manufacturer: syz
[  237.804054][  T122] usb 4-1: SerialNumber: syz
[  237.813377][ T8143] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  237.820956][ T8143] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  237.832248][  T122] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  237.843729][  T122] usbtest 4-1:1.0: Linux user mode ISO test driver
[  237.850410][  T122] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  238.048786][   T10] usb 4-1: USB disconnect, device number 81
[  238.449471][   T10] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  238.458966][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.647'.
[  238.469321][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.647'.
[  238.483111][ T8150] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  238.601742][   T10] usb 4-1: Using ep0 maxpacket: 8
[  238.608720][   T10] usb 4-1: config 5 has an invalid interface number: 143 but max is 2
[  238.617727][   T10] usb 4-1: config 5 has an invalid interface number: 6 but max is 2
[  238.627772][   T10] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  238.642294][   T10] usb 4-1: config 5 has an invalid descriptor of length 108, skipping remainder of the config
[  238.655354][   T10] usb 4-1: config 5 has no interface number 1
[  238.665084][   T10] usb 4-1: config 5 has no interface number 2
[  238.673412][   T10] usb 4-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  238.690996][   T10] usb 4-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30
[  238.702355][   T10] usb 4-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122
[  238.715815][   T10] usb 4-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30
[  238.726774][   T10] usb 4-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36
[  238.740146][   T10] usb 4-1: config 5 interface 143 has no altsetting 0
[  238.746965][   T10] usb 4-1: config 5 interface 6 has no altsetting 0
[  238.753674][   T10] usb 4-1: config 5 interface 0 has no altsetting 0
[  238.762544][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3
[  238.771823][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.779989][   T10] usb 4-1: Product: syz
[  238.785170][   T10] usb 4-1: Manufacturer: syz
[  238.789888][   T10] usb 4-1: SerialNumber: syz
[  238.921948][   T43] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  239.016139][   T10] uvcvideo 4-1:5.143: probe with driver uvcvideo failed with error -22
[  239.039125][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  239.048110][   T10] usb 4-1: MIDIStreaming interface descriptor not found
[  239.093175][   T10] usb 4-1: USB disconnect, device number 82
[  239.100317][   T43] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  239.132375][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.180367][   T43] usb 1-1: Product: syz
[  239.184613][   T43] usb 1-1: Manufacturer: syz
[  239.200346][ T6341] udevd[6341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  239.225836][   T43] usb 1-1: SerialNumber: syz
[  239.241246][   T43] usb 1-1: config 0 descriptor??
[  239.289061][   T43] ch341 1-1:0.0: ch341-uart converter detected
[  239.395458][ T8167] binder: 8165:8167 ioctl c0306201 2000000001c0 returned -22
[  239.410075][ T8168] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  239.653457][ T8175] netlink: 'syz.4.655': attribute type 4 has an invalid length.
[  239.723242][ T8175] netlink: 'syz.4.655': attribute type 4 has an invalid length.
[  239.864877][   T43] usb 1-1: failed to send control message: -71
[  239.874688][   T43] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  239.887196][   T43] usb 1-1: USB disconnect, device number 73
[  239.895309][   T43] ch341 1-1:0.0: device disconnected
[  239.989485][  T122] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  240.119389][  T122] usb 4-1: device descriptor read/64, error -71
[  240.359477][  T122] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  240.367321][ T8182] nfs4: Unknown parameter '
dev/net/tun'
[  240.403274][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'.
[  240.499479][  T122] usb 4-1: device descriptor read/64, error -71
[  240.619746][  T122] usb usb4-port1: attempt power cycle
[  240.969390][  T122] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  241.000066][  T122] usb 4-1: device descriptor read/8, error -71
[  241.240508][  T122] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  241.298632][  T122] usb 4-1: device descriptor read/8, error -71
[  241.420773][  T122] usb usb4-port1: unable to enumerate USB device
[  241.534057][ T8217] netlink: 176 bytes leftover after parsing attributes in process `syz.4.668'.
[  241.557889][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'.
[  241.582092][ T8217] overlayfs: conflicting lowerdir path
[  241.671204][  T981] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  241.809867][  T981] usb 1-1: device descriptor read/64, error -71
[  242.016264][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'.
[  242.059919][  T981] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  242.189497][  T981] usb 1-1: device descriptor read/64, error -71
[  242.299705][  T981] usb usb1-port1: attempt power cycle
[  242.639377][  T981] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  242.660147][  T981] usb 1-1: device descriptor read/8, error -71
[  242.805103][ T6777] bond0: (slave syz_tun): Releasing backup interface
[  242.899493][  T981] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  242.931593][  T981] usb 1-1: device descriptor read/8, error -71
[  243.040236][  T981] usb usb1-port1: unable to enumerate USB device
[  243.305023][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  243.314053][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  243.323728][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  243.335606][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  243.346313][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  243.396242][ T8239] vxcan1 speed is unknown, defaulting to 1000
[  243.761889][ T8249] fuse: Bad value for 'fd'
[  243.762753][ T8250] fuse: Bad value for 'fd'
[  243.974186][ T8239] chnl_net:caif_netlink_parms(): no params data found
[  244.031218][ T8257] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000
[  244.171234][ T8260] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  244.327326][ T8269] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  244.338286][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.346649][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.354447][ T8239] bridge_slave_0: entered allmulticast mode
[  244.362880][ T8239] bridge_slave_0: entered promiscuous mode
[  244.372788][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.380228][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.388788][ T8239] bridge_slave_1: entered allmulticast mode
[  244.412728][ T8239] bridge_slave_1: entered promiscuous mode
[  244.463709][ T8271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.687'.
[  244.526982][ T8239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.544913][ T8239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.622371][ T8239] team0: Port device team_slave_0 added
[  244.629970][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  244.650710][ T8275] can0: slcan on ttyprintk.
[  244.658443][ T8239] team0: Port device team_slave_1 added
[  244.709632][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.716846][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.745096][ T8239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.762029][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.769136][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.795702][ T8239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.856748][ T8239] hsr_slave_0: entered promiscuous mode
[  244.865519][ T8239] hsr_slave_1: entered promiscuous mode
[  244.869983][    T9] usb 1-1: new low-speed USB device number 78 using dummy_hcd
[  244.873776][ T8239] debugfs: 'hsr0' already exists in 'hsr'
[  244.885608][ T8239] Cannot create hsr debugfs directory
[  244.919284][  T122] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  245.034247][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  245.045206][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.081505][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  245.088663][    T9] pvrusb2: **********
[  245.108703][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  245.124091][    T9] pvrusb2: Important functionality might not be entirely working.
[  245.134997][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  245.150352][  T122] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  245.154298][    T9] pvrusb2: **********
[  245.199315][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  245.212700][  T122] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  245.237119][  T122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.268699][  T122] usb 5-1: Product: syz
[  245.278742][  T122] usb 5-1: Manufacturer: syz
[  245.290748][  T122] usb 5-1: SerialNumber: syz
[  245.311306][ T2344] pvrusb2: Invalid write control endpoint
[  245.323361][    T9] usb 1-1: USB disconnect, device number 78
[  245.332617][  T122] usb 5-1: config 0 descriptor??
[  245.371839][   T52] Bluetooth: hci3: command tx timeout
[  245.380472][  T122] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  245.515372][ T2344] pvrusb2: Invalid write control endpoint
[  245.527289][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  245.546144][   T43] usb 5-1: USB disconnect, device number 8
[  245.555623][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  245.578022][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  245.594969][ T8239] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  245.600729][ T2344] pvrusb2: Device being rendered inoperable
[  245.616116][   T24] usb 3-1: [UEAGLE-ATM] firmware is not available
[  245.627254][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  245.648191][ T8274] can0 (unregistered): slcan off ttyprintk.
[  245.654992][ T8239] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  245.662257][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  245.684010][ T2344] pvrusb2: Attached sub-driver cx25840
[  245.694762][ T8239] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  245.702274][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  245.715106][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  245.733282][ T8239] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  245.928588][ T8239] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.975578][ T8239] 8021q: adding VLAN 0 to HW filter on device team0
[  246.021010][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.028275][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.090929][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.098182][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.502312][ T5911] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  246.659460][ T5911] usb 1-1: device descriptor read/64, error -71
[  246.813494][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.929800][ T5911] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  247.069366][ T5911] usb 1-1: device descriptor read/64, error -71
[  247.179986][ T5911] usb usb1-port1: attempt power cycle
[  247.426230][ T8239] veth0_vlan: entered promiscuous mode
[  247.449669][   T52] Bluetooth: hci3: command tx timeout
[  247.458803][ T8239] veth1_vlan: entered promiscuous mode
[  247.526433][ T8239] veth0_macvtap: entered promiscuous mode
[  247.533826][ T5911] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  247.556748][ T8239] veth1_macvtap: entered promiscuous mode
[  247.584143][ T5911] usb 1-1: device descriptor read/8, error -71
[  247.607907][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.637102][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.668102][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.685914][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.701890][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.717724][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.841813][ T5911] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  247.868238][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.872490][ T5911] usb 1-1: device descriptor read/8, error -71
[  247.887003][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.952804][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.962261][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.019698][ T5911] usb usb1-port1: unable to enumerate USB device
[  248.410235][ T8360] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  248.417753][ T8360] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  248.450129][ T8360] vhci_hcd vhci_hcd.0: Device attached
[  248.467830][ T8361] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14)
[  248.474600][ T8361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  248.521109][ T8361] vhci_hcd vhci_hcd.0: Device attached
[  248.528199][ T8370] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6)
[  248.534767][ T8370] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  248.545538][ T8369] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  248.546115][ T8360] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13)
[  248.552140][ T8369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  248.558737][ T8360] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  248.585000][ T8361] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18)
[  248.591741][ T8361] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  248.604315][ T8360] vhci_hcd vhci_hcd.0: Device attached
[  248.610641][ T8381] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21)
[  248.613876][ T8370] vhci_hcd vhci_hcd.0: Device attached
[  248.617280][ T8381] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  248.637777][ T8369] vhci_hcd vhci_hcd.0: Device attached
[  248.643916][   T43] vhci_hcd: vhci_device speed not set
[  248.661989][ T8361] vhci_hcd vhci_hcd.0: Device attached
[  248.709979][   T43] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  248.720444][ T8381] vhci_hcd vhci_hcd.0: Device attached
[  248.746765][ T8365] vhci_hcd: connection closed
[  248.747758][ T8378] vhci_hcd: connection closed
[  248.750942][ T8363] vhci_hcd: connection reset by peer
[  248.773151][ T3532] vhci_hcd: stop threads
[  248.778746][ T3532] vhci_hcd: release socket
[  248.794293][ T8372] vhci_hcd: connection closed
[  248.814308][ T3532] vhci_hcd: disconnect device
[  248.836388][ T8376] vhci_hcd: connection closed
[  248.853227][ T8371] vhci_hcd: connection closed
[  248.858153][ T3532] vhci_hcd: stop threads
[  248.878837][ T3532] vhci_hcd: release socket
[  248.883737][ T5911] usb 37-2: new low-speed USB device number 2 using vhci_hcd
[  248.898980][ T8382] vhci_hcd: connection closed
[  248.899621][ T8374] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  248.911401][ T3532] vhci_hcd: disconnect device
[  248.932589][ T3532] vhci_hcd: stop threads
[  248.957681][ T3532] vhci_hcd: release socket
[  248.966017][ T3532] vhci_hcd: disconnect device
[  248.976320][ T3532] vhci_hcd: stop threads
[  248.991379][ T3532] vhci_hcd: release socket
[  249.006269][ T3532] vhci_hcd: disconnect device
[  249.023259][ T3532] vhci_hcd: stop threads
[  249.038528][ T3532] vhci_hcd: release socket
[  249.058323][ T3532] vhci_hcd: disconnect device
[  249.093479][ T3532] vhci_hcd: stop threads
[  249.097800][ T3532] vhci_hcd: release socket
[  249.106218][ T3532] vhci_hcd: disconnect device
[  249.114188][ T3532] vhci_hcd: stop threads
[  249.120335][ T8400] Bluetooth: hci0: Opcode 0x080f failed: -22
[  249.126767][ T3532] vhci_hcd: release socket
[  249.126995][ T3532] vhci_hcd: disconnect device
[  249.152559][ T8399] Bluetooth: hci0: Opcode 0x080f failed: -22
[  249.161713][ T8390] netlink: 'syz.2.702': attribute type 12 has an invalid length.
[  249.189454][ T8390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.702'.
[  249.529485][   T52] Bluetooth: hci3: command tx timeout
[  249.619454][ T5958] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  249.729317][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  249.780181][ T5958] usb 6-1: Using ep0 maxpacket: 32
[  249.792787][ T5958] usb 6-1: unable to get BOS descriptor or descriptor too short
[  249.811802][ T5958] usb 6-1: config 6 has an invalid interface number: 77 but max is 0
[  249.829287][ T5918] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  249.837271][ T5958] usb 6-1: config 6 has no interface number 0
[  249.859765][ T5958] usb 6-1: config 6 interface 77 has no altsetting 0
[  249.875274][ T5958] usb 6-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 3.50
[  249.887310][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.895870][   T24] usb 5-1: Using ep0 maxpacket: 8
[  249.906318][ T5958] usb 6-1: Product: syz
[  249.912176][ T5958] usb 6-1: Manufacturer: syz
[  249.918065][ T5958] usb 6-1: SerialNumber: syz
[  249.923155][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  249.939973][   T24] usb 5-1: config 16 interface 0 has no altsetting 0
[  249.965257][   T24] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=1a.35
[  249.983698][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.000651][ T5918] usb 1-1: device descriptor read/64, error -71
[  250.007278][   T24] usb 5-1: Product: syz
[  250.017428][   T24] usb 5-1: Manufacturer: syz
[  250.030788][   T24] usb 5-1: SerialNumber: syz
[  250.178154][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.195069][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.279392][ T5918] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  250.293807][   T24] usb 5-1: ucan: probing device on interface #0
[  250.320427][   T24] usb 5-1: ucan: invalid endpoint configuration
[  250.337046][   T24] usb 5-1: ucan: probe failed; try to update the device firmware
[  250.379095][   T24] usb 5-1: USB disconnect, device number 9
[  250.418278][ T5958] msi2500 6-1:6.77: Registered as swradio24
[  250.430845][ T5958] msi2500 6-1:6.77: SDR API is still slightly experimental and functionality changes may follow
[  250.444368][ T5918] usb 1-1: device descriptor read/64, error -71
[  250.459460][ T5958] usb 6-1: USB disconnect, device number 2
[  250.560054][ T5918] usb usb1-port1: attempt power cycle
[  250.919291][ T5918] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  250.982237][ T5918] usb 1-1: device descriptor read/8, error -71
[  251.130383][   T52] Bluetooth: hci0: command tx timeout
[  251.219431][ T5918] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  251.268056][ T5918] usb 1-1: device descriptor read/8, error -71
[  251.389653][ T5918] usb usb1-port1: unable to enumerate USB device
[  251.502158][   T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  251.622259][   T52] Bluetooth: hci3: command tx timeout
[  251.674393][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.686890][   T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  251.699737][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  251.708850][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.717211][   T24] usb 5-1: Product: syz
[  251.721515][   T24] usb 5-1: Manufacturer: syz
[  251.726686][   T24] usb 5-1: SerialNumber: syz
[  251.742987][   T24] cdc_mbim 5-1:1.0: skipping garbage
[  251.946164][ T8463] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  252.161801][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.171720][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.202389][ T8463] syz.4.713 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  252.729699][ T5918] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  252.836220][   T24] cdc_mbim 5-1:1.0: bind() failure
[  252.862150][   T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  252.869631][ T5918] usb 6-1: device descriptor read/64, error -71
[  252.876138][   T24] cdc_ncm 5-1:1.1: bind() failure
[  252.904057][   T24] usb 5-1: USB disconnect, device number 10
[  253.119430][ T5918] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  253.259476][ T5918] usb 6-1: device descriptor read/64, error -71
[  253.369847][ T5918] usb usb6-port1: attempt power cycle
[  253.729518][ T5918] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  253.775370][ T5918] usb 6-1: device descriptor read/8, error -71
[  253.839428][   T43] vhci_hcd: vhci_device speed not set
[  254.003358][ T5911] vhci_hcd: vhci_device speed not set
[  254.049294][ T5918] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  254.085575][ T5918] usb 6-1: device descriptor read/8, error -71
[  254.219598][ T5918] usb usb6-port1: unable to enumerate USB device
[  254.259512][  T981] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  254.419376][  T981] usb 5-1: device descriptor read/64, error -71
[  254.545538][ T8543] team_slave_0: entered promiscuous mode
[  254.552731][ T8543] team_slave_0: entered allmulticast mode
[  254.670580][  T981] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  254.809270][  T981] usb 5-1: device descriptor read/64, error -71
[  254.919736][  T981] usb usb5-port1: attempt power cycle
[  255.260588][  T981] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  255.293765][  T981] usb 5-1: device descriptor read/8, error -71
[  255.479297][ T5911] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  255.539339][  T981] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  255.572844][  T981] usb 5-1: device descriptor read/8, error -71
[  255.631165][ T5911] usb 1-1: Using ep0 maxpacket: 32
[  255.638245][ T5911] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  255.659900][ T5911] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  255.672179][ T5911] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  255.686973][ T5911] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  255.701897][  T981] usb usb5-port1: unable to enumerate USB device
[  255.712266][ T5911] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  255.721662][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.730393][ T5911] usb 1-1: Product: syz
[  255.734621][ T5911] usb 1-1: Manufacturer: syz
[  255.743497][ T5911] usb 1-1: SerialNumber: syz
[  255.758325][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  255.775381][ T5911] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input23
[  255.957462][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.966948][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.981426][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.991257][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.086005][ T5911] imon:send_packet: packet tx failed (-71)
[  256.119438][ T5911] imon 1-1:155.0: panel buttons/knobs setup failed
[  256.126391][ T5911] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  256.138648][ T5911]  (id 0x00)
[  256.220003][ T5911] rc_core: IR keymap rc-imon-pad not found
[  256.229673][ T5911] Registered IR keymap rc-empty
[  256.234860][ T5911] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  256.245909][ T5911] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  256.259320][ T5911] imon:send_packet: packet tx failed (-71)
[  256.279557][ T5911] imon 1-1:155.0: remote input dev register failed
[  256.287645][ T5911] imon 1-1:155.0: imon_init_intf0: rc device setup failed
[  256.327159][ T5911] imon 1-1:155.0: unable to initialize intf0, err 0
[  256.335334][ T5911] imon:imon_probe: failed to initialize context!
[  256.342776][ T5911] imon 1-1:155.0: unable to register, err -19
[  256.357621][ T5911] usb 1-1: USB disconnect, device number 87
[  256.529608][   T43] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  256.681652][   T43] usb 6-1: config 8 has an invalid interface number: 250 but max is 0
[  256.690464][   T43] usb 6-1: config 8 has no interface number 0
[  256.696806][   T43] usb 6-1: config 8 interface 250 has no altsetting 0
[  256.709408][   T43] usb 6-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86
[  256.718588][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.726833][   T43] usb 6-1: Product: syz
[  256.731345][   T43] usb 6-1: Manufacturer: syz
[  256.736003][   T43] usb 6-1: SerialNumber: syz
[  256.879379][ T5918] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  256.957297][   T43] gspca_main: tv8532-2.14.0 probing 0545:8333
[  256.995494][   T43] usb 6-1: USB disconnect, device number 7
[  257.039702][ T5918] usb 1-1: Using ep0 maxpacket: 8
[  257.059357][ T5918] usb 1-1: config 1 interface 0 altsetting 221 bulk endpoint 0x82 has invalid maxpacket 8
[  257.097894][ T5918] usb 1-1: config 1 interface 0 altsetting 221 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  257.140457][ T5918] usb 1-1: config 1 interface 0 has no altsetting 0
[  257.154226][ T5918] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  257.164598][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.180039][ T5918] usb 1-1: Product: п
[  257.186179][ T5918] usb 1-1: Manufacturer: Ѓ
[  257.196961][ T5918] usb 1-1: SerialNumber: ꦹⵑ株뀻䀌䴧쮝KꪖꌔՐ鱸ﷸ鋓썠縨漜⺜휜屯❱饡櫿ᣉ乳韞険ͥᔖ跜磭훥謃紩ₘ난鉭竒ዂ沒梉㙭邵㐠ᚢ䃘귱눦ﱚ鶭⯡蝴ூﾀ눣뚹욟憮䆌拆⬑崼ᷛ倲靝樼譜縷
[  257.206777][ T8581] netlink: 100 bytes leftover after parsing attributes in process `syz.4.734'.
[  257.243133][ T8577] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  257.260142][ T8577] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  257.691220][ T5918] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  257.722146][ T5918] usb 1-1: USB disconnect, device number 88
[  257.779382][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  257.859637][ T5911] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  257.929628][   T24] usb 6-1: Using ep0 maxpacket: 32
[  257.942081][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.953655][   T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  257.962913][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.973767][   T24] usb 6-1: config 0 descriptor??
[  258.009865][ T5911] usb 5-1: Using ep0 maxpacket: 32
[  258.015878][ T5911] usb 5-1: no configurations
[  258.022639][ T5911] usb 5-1: can't read configurations, error -22
[  258.159465][ T5911] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  258.322629][ T5911] usb 5-1: Using ep0 maxpacket: 32
[  258.352174][ T5911] usb 5-1: no configurations
[  258.356847][ T5911] usb 5-1: can't read configurations, error -22
[  258.387677][ T5911] usb usb5-port1: attempt power cycle
[  258.400344][   T24] kye 0003:0458:5013.0014: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  258.418954][   T24] kye 0003:0458:5013.0014: unknown main item tag 0x0
[  258.433080][   T24] kye 0003:0458:5013.0014: item fetching failed at offset 2/5
[  258.466881][   T24] kye 0003:0458:5013.0014: parse failed
[  258.475202][   T24] kye 0003:0458:5013.0014: probe with driver kye failed with error -22
[  258.508116][ T8609] batadv_slave_1: entered promiscuous mode
[  258.517910][ T8608] batadv_slave_1: left promiscuous mode
[  258.588369][   T24] usb 6-1: USB disconnect, device number 8
[  258.772599][ T5911] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  258.801174][ T5911] usb 5-1: Using ep0 maxpacket: 32
[  258.807226][ T5911] usb 5-1: no configurations
[  258.812175][ T5911] usb 5-1: can't read configurations, error -22
[  258.889511][ T5918] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[  258.939325][ T5911] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  258.959919][ T5911] usb 5-1: Using ep0 maxpacket: 32
[  258.965790][ T5911] usb 5-1: no configurations
[  258.970818][ T5911] usb 5-1: can't read configurations, error -22
[  258.977491][ T5911] usb usb5-port1: unable to enumerate USB device
[  259.019481][ T5918] usb 1-1: device descriptor read/64, error -71
[  259.259380][ T5918] usb 1-1: new full-speed USB device number 90 using dummy_hcd
[  259.399320][ T5918] usb 1-1: device descriptor read/64, error -71
[  259.510438][ T5918] usb usb1-port1: attempt power cycle
[  259.530457][ T5911] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  259.703309][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.714375][ T5911] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  259.725312][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.736163][ T5911] usb 6-1: config 0 descriptor??
[  259.850338][ T5918] usb 1-1: new full-speed USB device number 91 using dummy_hcd
[  259.870130][ T5918] usb 1-1: device descriptor read/8, error -71
[  260.109456][ T5918] usb 1-1: new full-speed USB device number 92 using dummy_hcd
[  260.130039][ T5918] usb 1-1: device descriptor read/8, error -71
[  260.148368][ T5911] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x4
[  260.157901][ T5911] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0
[  260.242854][ T5918] usb usb1-port1: unable to enumerate USB device
[  260.347616][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.356562][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.369895][ T5911] usb 6-1: USB disconnect, device number 9
[  260.676103][ T8625] netlink: 'syz.4.746': attribute type 1 has an invalid length.
[  260.685189][ T8625] netlink: 220 bytes leftover after parsing attributes in process `syz.4.746'.
[  260.973258][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  260.979855][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  260.989825][ T5911] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  261.151623][ T5911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  261.162795][ T5911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  261.173992][ T5911] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  261.185044][ T5911] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  261.198428][ T5911] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  261.209531][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.217626][ T5911] usb 5-1: Product: syz
[  261.223051][ T5911] usb 5-1: Manufacturer: syz
[  261.227702][ T5911] usb 5-1: SerialNumber: syz
[  261.236592][ T8627] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  261.246157][ T5911] cdc_mbim 5-1:1.0: skipping garbage
[  261.447684][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.463377][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.478438][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.489433][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.504239][ T8627] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  261.511708][ T8627] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  261.932845][ T5918] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[  261.951196][ T5911] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS
[  261.972844][ T5918] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[  261.983688][ T5911] cdc_mbim 5-1:1.0: bind() failure
[  261.994656][ T5918] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[  262.015120][ T5911] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  262.024403][ T5918] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[  262.031580][ T5911] cdc_ncm 5-1:1.1: bind() failure
[  262.045269][ T5918] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[  262.057143][ T5918] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[  262.083645][ T5918] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[  262.109334][ T5918] hid-generic 00A0:0008:0003.0016: unknown main item tag 0x0
[  262.122245][ T5911] usb 5-1: USB disconnect, device number 19
[  262.142846][ T5918] hid-generic 00A0:0008:0003.0016: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  262.239531][  T981] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  262.419396][  T981] usb 6-1: Using ep0 maxpacket: 16
[  262.434612][  T981] usb 6-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba
[  262.462842][  T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.479311][  T981] usb 6-1: Product: syz
[  262.496312][  T981] usb 6-1: Manufacturer: syz
[  262.506919][  T981] usb 6-1: SerialNumber: syz
[  262.525221][  T981] usb 6-1: config 0 descriptor??
[  262.558601][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'.
[  262.719438][ T5918] usb 1-1: new full-speed USB device number 93 using dummy_hcd
[  262.753357][  T981] snd-usb-hiface 6-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  262.871810][ T5918] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.882432][ T5918] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  262.896172][ T5918] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  262.905877][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.914319][ T5918] usb 1-1: Product: syz
[  262.919015][ T5918] usb 1-1: Manufacturer: syz
[  262.923911][ T5918] usb 1-1: SerialNumber: syz
[  263.147235][ T5918] usb 1-1: 0:2 : does not exist
[  263.178876][ T5918] usb 1-1: USB disconnect, device number 93
[  263.216612][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  263.239491][   T24] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  263.402400][   T24] usb 5-1: not running at top speed; connect to a high speed hub
[  263.411998][   T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  263.422162][   T24] usb 5-1: config 1 has no interface number 1
[  263.428652][   T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  263.444577][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  263.453990][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.464881][   T24] usb 5-1: Product: syz
[  263.469111][   T24] usb 5-1: Manufacturer: syz
[  263.473838][   T24] usb 5-1: SerialNumber: syz
[  264.301279][   T24] usb 5-1: failed to enable PITCH for EP 0x82
[  264.419789][   T24] usb 5-1: USB disconnect, device number 20
[  264.456385][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.763'.
[  264.503657][ T6341] udevd[6341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  264.531110][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.763'.
[  264.629919][ T8695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.765'.
[  264.643716][ T8695] netlink: 448 bytes leftover after parsing attributes in process `syz.4.765'.
[  264.719276][ T5918] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  264.873487][ T5918] usb 1-1: device descriptor read/64, error -71
[  264.888339][ T8702] comedi comedi3: c6xdigio: I/O port conflict (0x8004f27,3)
[  264.924374][ T8702] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000031: 0000 [#1] SMP KASAN PTI
[  264.936337][ T8702] KASAN: null-ptr-deref in range [0x0000000000000188-0x000000000000018f]
[  264.944804][ T8702] CPU: 0 UID: 0 PID: 8702 Comm: syz.4.766 Not tainted syzkaller #0 PREEMPT(full) 
[  264.954071][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  264.964169][ T8702] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  264.970274][ T8702] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 f2 69 09 cc 66 66 66 66 66 66 2e
[  264.989913][ T8702] RSP: 0018:ffffc9000e407880 EFLAGS: 00010202
[  264.996000][ T8702] RAX: dffffc0000000000 RBX: ffffffff8b8d5a26 RCX: 8e16487086d45a00
[  265.004001][ T8702] RDX: 0000000000000000 RSI: ffffffff8b8d5a26 RDI: 0000000000000031
[  265.011992][ T8702] RBP: ffffffff8260e85d R08: 0000000000000001 R09: 0000000000000000
[  265.019976][ T8702] R10: dffffc0000000000 R11: ffffed1003bd6e23 R12: 0000000000000000
[  265.027957][ T8702] R13: 0000000000000188 R14: 0000000000000188 R15: 0000000000000001
[  265.035941][ T8702] FS:  00007fd37d2b66c0(0000) GS:ffff8881257a7000(0000) knlGS:0000000000000000
[  265.044893][ T8702] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  265.051485][ T8702] CR2: 00007ffb90382e9c CR3: 0000000078438000 CR4: 00000000003526f0
[  265.059469][ T8702] Call Trace:
[  265.062763][ T8702]  <TASK>
[  265.065696][ T8702]  __kasan_check_byte+0x12/0x40
[  265.070658][ T8702]  lock_acquire+0x8d/0x360
[  265.075113][ T8702]  ? kernfs_root+0x1c/0x230
[  265.079649][ T8702]  down_write+0x96/0x1f0
[  265.083920][ T8702]  ? kernfs_remove_by_name_ns+0x3d/0x130
[  265.089581][ T8702]  ? __pfx_down_write+0x10/0x10
[  265.094447][ T8702]  ? kernfs_root+0x1c/0x230
[  265.098969][ T8702]  ? kernfs_root+0x1c/0x230
[  265.103505][ T8702]  ? kernfs_root+0x1ea/0x230
[  265.108132][ T8702]  kernfs_remove_by_name_ns+0x3d/0x130
[  265.113642][ T8702]  bus_remove_driver+0x198/0x2f0
[  265.118623][ T8702]  comedi_device_detach_locked+0x178/0x750
[  265.124473][ T8702]  comedi_device_attach+0x5d4/0x720
[  265.129780][ T8702]  comedi_unlocked_ioctl+0x5ff/0x1020
[  265.135169][ T8702]  ? kasan_quarantine_put+0xdd/0x220
[  265.140501][ T8702]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  265.146367][ T8702]  ? do_futex+0x333/0x420
[  265.150946][ T8702]  ? __se_sys_futex+0x36f/0x400
[  265.155886][ T8702]  ? bpf_lsm_file_ioctl+0x9/0x20
[  265.160838][ T8702]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  265.166754][ T8702]  __se_sys_ioctl+0xfc/0x170
[  265.171364][ T8702]  do_syscall_64+0xfa/0xfa0
[  265.175970][ T8702]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.181532][ T8702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.188286][ T8702]  ? clear_bhb_loop+0x60/0xb0
[  265.193005][ T8702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.199192][ T8702] RIP: 0033:0x7fd37c38eba9
[  265.203751][ T8702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.223778][ T8702] RSP: 002b:00007fd37d2b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  265.232503][ T8702] RAX: ffffffffffffffda RBX: 00007fd37c5d5fa0 RCX: 00007fd37c38eba9
[  265.240500][ T8702] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000007
[  265.248590][ T8702] RBP: 00007fd37c411e19 R08: 0000000000000000 R09: 0000000000000000
[  265.256696][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.264688][ T8702] R13: 00007fd37c5d6038 R14: 00007fd37c5d5fa0 R15: 00007ffe90a1d618
[  265.272689][ T8702]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  265.275807][ T8702] Modules linked in:
[  265.279816][    C0] vkms_vblank_simulate: vblank timer overrun
[  265.287066][ T8702] ---[ end trace 0000000000000000 ]---
[  265.299760][ T8702] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  265.307053][ T8702] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 f2 69 09 cc 66 66 66 66 66 66 2e
[  265.329635][ T8702] RSP: 0018:ffffc9000e407880 EFLAGS: 00010202
[  265.335908][ T8702] RAX: dffffc0000000000 RBX: ffffffff8b8d5a26 RCX: 8e16487086d45a00
[  265.392973][ T8702] RDX: 0000000000000000 RSI: ffffffff8b8d5a26 RDI: 0000000000000031
[  265.409245][ T5918] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  265.458369][ T8709] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.766'.
[  265.469315][ T8702] RBP: ffffffff8260e85d R08: 0000000000000001 R09: 0000000000000000
[  265.477653][ T8702] R10: dffffc0000000000 R11: ffffed1003bd6e23 R12: 0000000000000000
[  265.519386][ T8708] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.766'.
[  265.529251][ T8702] R13: 0000000000000188 R14: 0000000000000188 R15: 0000000000000001
[  265.537276][ T8702] FS:  00007fd37d2b66c0(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000
[  265.559242][ T5918] usb 1-1: device descriptor read/64, error -71
[  265.560893][ T8702] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  265.574423][ T8702] CR2: 0000200000002000 CR3: 0000000078438000 CR4: 00000000003526f0
[  265.584698][ T8702] Kernel panic - not syncing: Fatal exception
[  265.591279][ T8702] Kernel Offset: disabled
[  265.595709][ T8702] Rebooting in 86400 seconds..